Detection of malicious URLs using Temporal Convolutional Network and Multi-Head Self-Attention mechanism

Kód výsledku v IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F29142890%3A_____%2F25%3A00052520" target="_blank" >RIV/29142890:_____/25:00052520 - isvavai.cz</a>

Výsledek na webu

<a href="https://www.sciencedirect.com/science/article/abs/pii/S1568494624013140?getft_integrator=clarivate&pes=vor&utm_source=clarivate" target="_blank" >https://www.sciencedirect.com/science/article/abs/pii/S1568494624013140?getft_integrator=clarivate&pes=vor&utm_source=clarivate</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.1016/j.asoc.2024.112540" target="_blank" >10.1016/j.asoc.2024.112540</a>

Jazyk výsledku

angličtina

Název v původním jazyce

Detection of malicious URLs using Temporal Convolutional Network and Multi-Head Self-Attention mechanism

Popis výsledku v původním jazyce

Natural Language Processing (NLP) and Deep Learning (DL) have achieved remarkable results in various fields and have also been proven to be effective in detecting phishing webpages. Inspired by the great success of NLP and DL models in phishing detection-related tasks, we examined the application of these techniques in classifying malicious and benign URLs (Uniform Resource Locator). We found that the existing NLPbased solutions mainly used Convolutional Neural Network (CNN) and Recurrent Neural Network (RNN) for phishing URL detection. However, CNN performs poorly when handling non-spatial data, while RNN cannot capture the long-distance dependency and has higher computational complexity. To overcome these issues, this paper proposes a phishing detection model based on Temporal Convolutional Network (TCN) to address the limitations of the conventional CNN and/or RNN algorithms. The proposed model used character-level and word-level embedding methods to obtain the feature representations of the input URLs. Then, TCN was employed for feature extraction and further enhanced with Multi-Head Self-Attention (MHSA) mechanism to classify legitimate and phishing websites. We conducted several experiments to validate the performance of the proposed model and measured various evaluation metrics. The obtained results showed that our solution performed better than other baseline models in classifying malicious URLs, achieving an accuracy of 98.78%. This implied the proposed approach provided an effective and efficient solution for detecting phishing URLs.

Název v anglickém jazyce

Detection of malicious URLs using Temporal Convolutional Network and Multi-Head Self-Attention mechanism

Popis výsledku anglicky

Natural Language Processing (NLP) and Deep Learning (DL) have achieved remarkable results in various fields and have also been proven to be effective in detecting phishing webpages. Inspired by the great success of NLP and DL models in phishing detection-related tasks, we examined the application of these techniques in classifying malicious and benign URLs (Uniform Resource Locator). We found that the existing NLPbased solutions mainly used Convolutional Neural Network (CNN) and Recurrent Neural Network (RNN) for phishing URL detection. However, CNN performs poorly when handling non-spatial data, while RNN cannot capture the long-distance dependency and has higher computational complexity. To overcome these issues, this paper proposes a phishing detection model based on Temporal Convolutional Network (TCN) to address the limitations of the conventional CNN and/or RNN algorithms. The proposed model used character-level and word-level embedding methods to obtain the feature representations of the input URLs. Then, TCN was employed for feature extraction and further enhanced with Multi-Head Self-Attention (MHSA) mechanism to classify legitimate and phishing websites. We conducted several experiments to validate the performance of the proposed model and measured various evaluation metrics. The obtained results showed that our solution performed better than other baseline models in classifying malicious URLs, achieving an accuracy of 98.78%. This implied the proposed approach provided an effective and efficient solution for detecting phishing URLs.

Druh

J_imp - Článek v periodiku v databázi Web of Science

CEP obor

—

OECD FORD obor

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Projekt

—

Návaznosti

N - Vyzkumna aktivita podporovana z neverejnych zdroju

Rok uplatnění

2025

Kód důvěrnosti údajů

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Název periodika

APPLIED SOFT COMPUTING

ISSN

0218-348X

e-ISSN

—

Svazek periodika

—

Číslo periodika v rámci svazku

169

Stát vydavatele periodika

SG - Singapurská republika

Počet stran výsledku

17

Strana od-do

1-17

Kód UT WoS článku

001389674000001

EID výsledku v databázi Scopus

—