PREDICTION OF PHISHING VULNERABILITIES BASED ON MACHINE LEARNING ALGORITHMS
Faculty
Department
Year of Publication
Keyword
Publication Type
Abstract
The growing sophistication of phishing attacks continues to threaten digital security, causing financial losses, data compromise, and reduced trust in online platforms. Traditional blacklist and rule-based systems struggle to detect newly emerging phishing patterns, highlighting the need for adaptive, intelligent, and automated approaches. This study addresses this challenge by developing a machine learning-driven phishing vulnerability prediction model capable of accurately distinguishing phishing websites from legitimate ones. The objectives include dataset acquisition, feature preprocessing, model development, and performance evaluation. A labelled URL-based phishing dataset sourced from Kaggle was cleaned, encoded, normalized, and split using an 80:20 train-test ratio. Four supervised learning algorithms: Logistic Regression, Decision Tree, Random Forest, and Extreme Gradient Boosting (XGBoost), were implemented and assessed using Accuracy, Precision, Recall, and F1-score. Among all models, XGBoost achieved the best performance with an Accuracy of 0.96, Precision of 0.97, Recall of 0.96, and an F1-score of 0.96, demonstrating strong predictive ability and robustness. Random Forest also performed well but with slightly lower scores. The final XGBoost model was deployed in a Flask-based web application to provide realtime phishing detection and user awareness. The findings confirm that machine learning, particularly ensemble-based methods, provides a scalable and highly effective approach to phishing vulnerability prediction. However, limitations include reliance on static URL features, dataset-specific bias, and the absence of behavioural or real-time network indicators. Future work should incorporate hybrid features, adversarial robustness testing, and explainable AI techniques to improve transparency and adaptability to evolving phishing attacks.
Supervisor(s)
co-supervisor


