A Multi-Classifier Based Prediction Model for Phishing Emails Detection Using Topic Modelling, Named Entity Recognition and Image Processing
- 1 Department of Information Technology, KCG College of Technology, Chennai, India
- 2 Department of Computer Science, St. Joseph’s College of Engineering and Technology, Kerala, India
- 3 Department of Information Science and Technology, Anna University, Chennai, India
Abstract
Phishing is the act of attempting to steal a user’s financial and personal information, such as credit card numbers and passwords by pretending to be a trustworthy participant, during online communication. Attackers may direct the users to a fake website that could seem legitimate, and then gather useful and confidential information using that site. In order to protect users from Social Engineering techniques such as phishing, various measures have been developed, including improvement of Technical Security. In this paper, we propose a new technique, namely, “A Prediction Model for the Detection of Phishing e-mails using Topic Modelling, Named Entity Recognition and Image Processing”. The features extracted are Topic Modelling features, Named Entity features and Structural features. A multi-classifier prediction model is used to detect the phishing mails. Experimental results show that the multi-classification technique outperforms the single-classifier-based prediction techniques. The resultant accuracy of the detection of phishing e-mail is 99% with the highest False Positive Rate being 2.1%.
- APWG (2013) Anti Phishing Working Group. http://www.antiphishing.org
- Chandrasekaran, M., Narayanan, M. and Upadhyaya, S. (2006) Phishing Email Detection Based on Structural Properties. Proceedings of 9th Annual NYS Cyber Security Conference, Albany, 14 June 2006, 2-8.
- Landauer, T.K. and Dumais, S.T. (1997) A Solution to Plato’s Problem: The Latent Semantic Analysis Theory of Acquisition, Induction, and Representation of Knowledge. Psychological Review, 104, 211-240. http://dx.doi.org/10.1037/0033-295X.104.2.211
- Hofmann, T. (1999) Probabilistic Latent Semantic Indexing. Proceedings of the 22nd Annual International ACM SIGIR Conference on Research and Development in Information Retrieval, Berkeley, 15-19 August 1999, 50-57. http://dx.doi.org/10.1145/312624.312649
- Blei, M., Andrew, Y. and Michael, I. (2003) Latent Dirichlet Allocation. The Journal of Machine Learning Research, 3, 993-1022.
- Sang, E.F.T.K. and De Meulder, F. (2003) Introduction to the CoNLL-2003 Shared Task: Language-Independent Named Entity Recognition. Proceedings of the Seventh Conference on Natural Language Learning, Edmonton, Canada, 31 May 2003, 142-147.
- Zhang, W., Lu, H., Xu, B. and Yang, H. (2013) Web Phishing Detection Based on Page Spatial Layout Similarity. Informatica, 37, 231-244.
- Nadeau, D. and Sekine, S. (2007) A Survey of Named Entity Recognition and Classification. Lingvisticae Investigationes, 30, 3-26. http://dx.doi.org/10.1075/li.30.1.03nad
- Gibbs LDA (2013) LDA Using Gibbs Sampling. http://jgibblda.sourceforge.net/
- Apache James Mime4J Parser (2013). http://james.apache.org/mime4j
- The Stanford Natural Language Processing Group (2013). http://nlp.stanford.edu
- Ramanathan, V. and Wechsler, H. (2013) Phishing Detection and Impersonated Entity Discovery Using Conditional Random Field and Latent Dirichlet Allocation. Computers and Security, 34, 123-139. http://dx.doi.org/10.1016/j.cose.2012.12.002
- Lafferty, McCallum, A. and Pereira, F. (2001) Conditional Random Fields: Probabilistic Models for Segmenting and Labeling Sequence Dat. Proceedings of International Conference on Machine Learning, San Francisco, 28 June-1 July 2001, 282-289.
- Wallach, H.M. (2004) Conditional Random Fields: An Introduction. Technical Report MS-CIS-04-21.