网络钓鱼检测研究综述

A Review of Phishing Detection Research

网络钓鱼作为一种社会工程攻击手段,旨在通过伪装成可信任的实体,如银行、社交媒体平台或政府机构,通过虚假的电子邮件、网站或消息来欺骗受害者。研究者主要通过各种技术手段检测网络钓鱼攻击,但当前检测研究仍面临三方面问题。1)攻击者采用伪装、漏洞利用和规避技术以逃避检测。2)现有的检测方法存在可解释性差、实时性低以及概念漂移等问题。3)由于缺乏足够的可解释性,造成用户对检测结果不信任。该文从应用场景、数据集、检测方法等方面对当前检测研究进行归纳与总结,并提出当前面临的问题以及展望未来可能的研究热点。

Phishing,as a form of social engineering attack,aims to deceive victims by masquerading as a trustworthy entity such as a bank,social media platform,or government agency,using false emails,websites,or messages.Researchers primarily employ various technological means to detect phishing attacks,yet current detection studies face three main challenges.Firstly,attackers employ disguise,exploit vulnerabilities,and employ evasion techniques to evade detection.Secondly,existing detection methods suffer from poor interpretability,low real-time capabilities,and issues like concept drift.Lastly,due to insufficient interpretability,users may lack trust in the detection results.This paper summarizes the current detection researches from the aspects of application scenarios,datasets,detection methods,etc.,and puts forward the current problems and prospects the possible research hotspots in the future.