Improving phishing email detection performance through deep learning with adaptive optimization

Kód výsledku v IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F04274644%3A_____%2F25%3A%230001276" target="_blank" >RIV/04274644:_____/25:#0001276 - isvavai.cz</a>

Výsledek na webu

<a href="https://www.nature.com/articles/s41598-025-20668-5" target="_blank" >https://www.nature.com/articles/s41598-025-20668-5</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.1038/s41598-025-20668-5" target="_blank" >10.1038/s41598-025-20668-5</a>

Jazyk výsledku

angličtina

Název v původním jazyce

Improving phishing email detection performance through deep learning with adaptive optimization

Popis výsledku v původním jazyce

Phishing email attacks are becoming increasingly sophisticated, placing a heavy burden on cybersecurity, which requires more advanced detection techniques. Attackers often craft emails that closely resemble those from trusted sources, making it difficult for users and traditional filters to distinguish between legitimate and malicious messages. This paper introduces a new hybrid deep learning and optimizer architecture for detecting phishing emails based on the Mountain Gazelle Optimizer (MGO). A hybrid architecture is proposed, comprising contextual embedding using Bidirectional Encoder Representations from Transformers (BERT), feature extraction with Convolutional Neural Network (CNN), Gated Recurrent Unit (GRU) temporal dependencies, and multi-head attention for refining the key feature focus in email text. The dataset used in this paper for phishing detection is obtained from the Kaggle website, which includes phishing and legitimate emails. Hyperparameter optimization with the MGO results in a robust model with good classification accuracy. Our experiments demonstrate improved accuracy, precision, recall, and F1 score, with values of 96.8%, 97.2%, 95.4%, and 96.3%, respectively, for enhanced phishing email detection compared to baseline models. Also, the model reduces false positives by 2.5% compared to state-of-the-art conventional methods. These results demonstrate the effectiveness of transformer-based embeddings, combined with advanced neural networks and optimization techniques, in mitigating phishing threats.

Název v anglickém jazyce

Improving phishing email detection performance through deep learning with adaptive optimization

Popis výsledku anglicky

Phishing email attacks are becoming increasingly sophisticated, placing a heavy burden on cybersecurity, which requires more advanced detection techniques. Attackers often craft emails that closely resemble those from trusted sources, making it difficult for users and traditional filters to distinguish between legitimate and malicious messages. This paper introduces a new hybrid deep learning and optimizer architecture for detecting phishing emails based on the Mountain Gazelle Optimizer (MGO). A hybrid architecture is proposed, comprising contextual embedding using Bidirectional Encoder Representations from Transformers (BERT), feature extraction with Convolutional Neural Network (CNN), Gated Recurrent Unit (GRU) temporal dependencies, and multi-head attention for refining the key feature focus in email text. The dataset used in this paper for phishing detection is obtained from the Kaggle website, which includes phishing and legitimate emails. Hyperparameter optimization with the MGO results in a robust model with good classification accuracy. Our experiments demonstrate improved accuracy, precision, recall, and F1 score, with values of 96.8%, 97.2%, 95.4%, and 96.3%, respectively, for enhanced phishing email detection compared to baseline models. Also, the model reduces false positives by 2.5% compared to state-of-the-art conventional methods. These results demonstrate the effectiveness of transformer-based embeddings, combined with advanced neural networks and optimization techniques, in mitigating phishing threats.

Druh

J_imp - Článek v periodiku v databázi Web of Science

CEP obor

—

OECD FORD obor

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Projekt

—

Návaznosti

I - Institucionalni podpora na dlouhodoby koncepcni rozvoj vyzkumne organizace

Rok uplatnění

2025

Kód důvěrnosti údajů

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Název periodika

Scientific Reports

ISSN

2045-2322

e-ISSN

—

Svazek periodika

15

Číslo periodika v rámci svazku

36724

Stát vydavatele periodika

DE - Spolková republika Německo

Počet stran výsledku

16

Strana od-do

1-16

Kód UT WoS článku

001598250200028

EID výsledku v databázi Scopus

2-s2.0-105019347761