國立虎尾科技大學 |

From Hooks to Clicks : = A Data-Driven Approach to Understanding Language Trends in Phishing Schemes Across Different Attack Vectors.

紀錄類型:	書目-語言資料,手稿 : Monograph/item
正題名/作者:	From Hooks to Clicks :/
其他題名:	A Data-Driven Approach to Understanding Language Trends in Phishing Schemes Across Different Attack Vectors.
作者:	Hawamdah, Luma M.
面頁冊數:	1 online resource (166 pages)
附註:	Source: Dissertations Abstracts International, Volume: 85-06, Section: A.
Contained By:	Dissertations Abstracts International85-06A.
標題:	Engineering. -
電子資源:	click for full text (PQDT)
ISBN:	9798381144932

From Hooks to Clicks : = A Data-Driven Approach to Understanding Language Trends in Phishing Schemes Across Different Attack Vectors.
Hawamdah, Luma M.

From Hooks to Clicks :A Data-Driven Approach to Understanding Language Trends in Phishing Schemes Across Different Attack Vectors. - 1 online resource (166 pages)

Source: Dissertations Abstracts International, Volume: 85-06, Section: A.

Thesis (D.Engr.)--The George Washington University, 2024.

Includes bibliographical references

Phishing attacks utilize cybersecurity's significant vulnerabilities, human beings, by leveraging the skills of human deceptiveness and technology to turn their targets into victims. These attacks have become the number one preferred method for adversaries to execute their attacks by successfully understanding the victim's behavior and emotions to gain their trust. They pose a high threat to organizations in both the business and personal aspects of it. Even though organizations invest in security systems, and updates to their infrastructure they have yet to find a complete defense mechanism against these attacks where individuals follow secure protocols, security awareness training for organizations, and rules and regulations enacted to defend against phishing attacks.With the above understanding in mind, a novel topic to investigate a different form of analysis was drawn out in the open. This research aims to address the critical challenge of identifying phishing attempts within various forms of digital communication, such as emails, text messages, malicious URLs, and job postings. The goal is to leverage Natural Language Processing (NLP) techniques, specifically Bidirectional Encoder Representations from Transformers (BERT), to create a robust model capable of flagging potential phishing content from a diverse range of datasets. The base model introduced is the "PhishNet". It was further decided to compare the same framework on BART and XLNET models to verify that the BERT approach with the concatenated dataset provides valid credibility to the approach.The model was implemented by assessing a basic predictive model for detecting phishing URLS and building on it by utilizing multi-diverse datasets that were concatenated to address the gaps identified in the predictive models in today's market. The data was facilitated by different phishing attacks building upon it and combining the data into one form of entry to provide us with a larger scale of understanding of the language used to perform a phishing attack.The phishing dataset shows that there are six main categories of language that are used to grab the attention of the victims - these include obtaining a reward, a form of urgency, curiosity, job requirement, for entertainment purposes and from fear. PhishNet has proven to provide higher accuracy than the current standalone URL blocklist model with an accuracy result of over 99% as it identifies these different psychological traits an attacker might have to perform the attack. With this understanding, we are also able to create a framework for training employees and investigating the feasibility of building the model through a browser extension. The research's significance lies in offering innovative and effective approaches to prevent and mitigate phishing assaults and strengthening information system security.

Electronic reproduction.
Ann Arbor, Mich. :
ProQuest,
2024

Mode of access: World Wide Web

ISBN: 9798381144932Subjects--Topical Terms:

561152
Engineering.
Subjects--Index Terms:

Social engineering attacksIndex Terms--Genre/Form:

554714
Electronic books.

From Hooks to Clicks : = A Data-Driven Approach to Understanding Language Trends in Phishing Schemes Across Different Attack Vectors.
LDR:04350ntm a22003977 4500 001 1143913
005 20240517105025.5
006 m o d
007 cr mn ---uuuuu
008 250605s2024 xx obm 000 0 eng d
020 $a 9798381144932
035 $a (MiAaPQ)AAI30815935
035 $a AAI30815935
040 $a MiAaPQ $b eng $c MiAaPQ $d NTU
100 1 $a Hawamdah, Luma M. $3 1468723
245 1 0 $a From Hooks to Clicks : $b A Data-Driven Approach to Understanding Language Trends in Phishing Schemes Across Different Attack Vectors.
264 0 $c 2024
300 $a 1 online resource (166 pages)
336 $a text $b txt $2 rdacontent
337 $a computer $b c $2 rdamedia
338 $a online resource $b cr $2 rdacarrier
500 $a Source: Dissertations Abstracts International, Volume: 85-06, Section: A.
500 $a Advisor: Hashemipour, Mehdi.
502 $a Thesis (D.Engr.)--The George Washington University, 2024.
504 $a Includes bibliographical references
520 $a Phishing attacks utilize cybersecurity's significant vulnerabilities, human beings, by leveraging the skills of human deceptiveness and technology to turn their targets into victims. These attacks have become the number one preferred method for adversaries to execute their attacks by successfully understanding the victim's behavior and emotions to gain their trust. They pose a high threat to organizations in both the business and personal aspects of it. Even though organizations invest in security systems, and updates to their infrastructure they have yet to find a complete defense mechanism against these attacks where individuals follow secure protocols, security awareness training for organizations, and rules and regulations enacted to defend against phishing attacks.With the above understanding in mind, a novel topic to investigate a different form of analysis was drawn out in the open. This research aims to address the critical challenge of identifying phishing attempts within various forms of digital communication, such as emails, text messages, malicious URLs, and job postings. The goal is to leverage Natural Language Processing (NLP) techniques, specifically Bidirectional Encoder Representations from Transformers (BERT), to create a robust model capable of flagging potential phishing content from a diverse range of datasets. The base model introduced is the "PhishNet". It was further decided to compare the same framework on BART and XLNET models to verify that the BERT approach with the concatenated dataset provides valid credibility to the approach.The model was implemented by assessing a basic predictive model for detecting phishing URLS and building on it by utilizing multi-diverse datasets that were concatenated to address the gaps identified in the predictive models in today's market. The data was facilitated by different phishing attacks building upon it and combining the data into one form of entry to provide us with a larger scale of understanding of the language used to perform a phishing attack.The phishing dataset shows that there are six main categories of language that are used to grab the attention of the victims - these include obtaining a reward, a form of urgency, curiosity, job requirement, for entertainment purposes and from fear. PhishNet has proven to provide higher accuracy than the current standalone URL blocklist model with an accuracy result of over 99% as it identifies these different psychological traits an attacker might have to perform the attack. With this understanding, we are also able to create a framework for training employees and investigating the feasibility of building the model through a browser extension. The research's significance lies in offering innovative and effective approaches to prevent and mitigate phishing assaults and strengthening information system security.
533 $a Electronic reproduction. $b Ann Arbor, Mich. : $c ProQuest, $d 2024
538 $a Mode of access: World Wide Web
650 4 $a Engineering. $3 561152
650 4 $a Information technology. $3 559429
650 4 $a Information science. $3 561178
653 $a Social engineering attacks
653 $a Natural language processing
653 $a Machine learning model
653 $a Information system security
653 $a Cybersecurity
655 7 $a Electronic books. $2 local $3 554714
690 $a 0537
690 $a 0489
690 $a 0723
710 2 $a ProQuest Information and Learning Co. $3 1178819
710 2 $a The George Washington University. $b Cybersecurity Analytics. $3 1467608
773 0 $t Dissertations Abstracts International $g 85-06A.
856 4 0 $u http://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=30815935 $z click for full text (PQDT)