Systematization of Knowledge (SoK): A Systematic Review of Software-Based Web Phishing Detection
| Autor: | Ala Al-Fuqaha, Abdallah Khreishah, Zuochao Dou, Issa Khalil, Mohsen Guizani |
|---|---|
| Rok vydání: | 2017 |
| Předmět: |
Computer science
business.industry Social engineering (security) 020206 networking & telecommunications 02 engineering and technology Phishing detection Phishing Electronic mail World Wide Web Software 0202 electrical engineering electronic engineering information engineering Data analysis Cyber-attack 020201 artificial intelligence & image processing Electrical and Electronic Engineering business Personally identifiable information |
| Zdroj: | IEEE Communications Surveys & Tutorials. 19:2797-2819 |
| ISSN: | 1553-877X |
| DOI: | 10.1109/comst.2017.2752087 |
| Popis: | Phishing is a form of cyber attack that leverages social engineering approaches and other sophisticated techniques to harvest personal information from users of websites. The average annual growth rate of the number of unique phishing websites detected by the Anti Phishing Working Group is 36.29% for the past six years and 97.36% for the past two years. In the wake of this rise, alleviating phishing attacks has received a growing interest from the cyber security community. Extensive research and development have been conducted to detect phishing attempts based on their unique content, network, and URL characteristics. Existing approaches differ significantly in terms of intuitions, data analysis methods, as well as evaluation methodologies. This warrants a careful systematization so that the advantages and limitations of each approach, as well as the applicability in different contexts, could be analyzed and contrasted in a rigorous and principled way. This paper presents a systematic study of phishing detection schemes, especially software based ones. Starting from the phishing detection taxonomy, we study evaluation datasets, detection features, detection techniques, and evaluation metrics. Finally, we provide insights that we believe will help guide the development of more effective and efficient phishing detection schemes. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|