학술논문

Bridging the Gap in Phishing Detection: A Comprehensive Phishing Dataset Collector
Document Type
Conference
Source
2023 IEEE International Conference on Service Operations and Logistics, and Informatics (SOLI) Service Operations and Logistics, and Informatics (SOLI), 2023 IEEE International Conference on. :1-7 Dec, 2023
Subject
Communication, Networking and Broadcast Technologies
Computing and Processing
General Topics for Engineers
Signal Processing and Analysis
Transportation
Uniform resource locators
Phishing
Source coding
Libraries
Informatics
Software development management
Logistics
Detection Approaches
Webpage Resources
Language
ISSN
2768-1890
Abstract
To combat phishing attacks - aimed at luring web users to divulge their sensitive information - various phishing detection approaches have been proposed. As attackers focus on devising new tactics to bypass existing detection solutions, researchers have adapted by integrating machine learning and deep learning into phishing detection. Phishing dataset collection is vital to developing effective phishing detection approaches, which highly depend on the diversity of the gathered datasets. The lack of diversity in the dataset results in a biased model. Since phishing websites are often short-lived, collecting them is also a challenge. Consequently, very few phishing webpage dataset repositories exist to date. No single repository comprehensively consolidates all phishing elements corresponding to a phishing webpage, namely, URL, webpage source code, screenshot, and related webpage resources. This paper introduces a resource collection tool designed to gather various resources associated with a URL, such as CSS, Javascript, favicons, webpage images, and screenshots. Our tool leverages PhishTank as the primary source for obtaining active phishing URLs. Our tool fetches several additional webpage resources compared to PyWebCopy Python library, which provides webpage content for a given URL. Additionally, we share a sample dataset generated using our tool comprising 4, 056 legitimate and 5,666 phishing URLs along with their associated resources on GitHub [1]. We also remark on the top correlated phishing features with their associated class label found in our dataset. Our tool offers a comprehensive resource set that can aid researchers in developing effective phishing detection approaches.