{"id":"https://openalex.org/W7204853582","doi":"https://doi.org/10.3389/fcomp.2026.1834407","title":"An integrated evaluation protocol for adversarial robustness, generalization, and explanation stability in URL-based phishing detection","display_name":"An integrated evaluation protocol for adversarial robustness, generalization, and explanation stability in URL-based phishing detection","publication_year":2026,"publication_date":"2026-08-31","ids":{"openalex":"https://openalex.org/W7204853582","doi":"https://doi.org/10.3389/fcomp.2026.1834407"},"language":"en","primary_location":{"id":"doi:10.3389/fcomp.2026.1834407","doi":"https://doi.org/10.3389/fcomp.2026.1834407","is_oa":true,"landing_page_url":"https://doi.org/10.3389/fcomp.2026.1834407","pdf_url":"https://www.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2026.1834407/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","jufo-1","norway-1","poland-20","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2026.1834407/pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5128695180","display_name":"Tanvir Ahamed","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I85389745","display_name":"Woosong University","ror":"https://ror.org/02srty072","country_code":"KR","type":"education","lineage":["https://openalex.org/I85389745"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Tanvir Ahamed","raw_affiliation_strings":["Department of AI and Big Data, Woosong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of AI and Big Data, Woosong University","institution_ids":["https://openalex.org/I85389745"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119498555","display_name":"Shawon Chakrabarty Kakon","orcid":"https://orcid.org/0009-0005-5548-9805","observed_orcids":["https://orcid.org/0009-0005-5548-9805"]},"institutions":[{"id":"https://openalex.org/I85389745","display_name":"Woosong University","ror":"https://ror.org/02srty072","country_code":"KR","type":"education","lineage":["https://openalex.org/I85389745"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Shawon Chakrabarty Kakon","raw_affiliation_strings":["Department of AI and Big Data, Woosong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of AI and Big Data, Woosong University","institution_ids":["https://openalex.org/I85389745"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044844639","display_name":"Fahmid Al Farid","orcid":"https://orcid.org/0000-0003-2625-2348","observed_orcids":["https://orcid.org/0000-0003-2625-2348"]},"institutions":[{"id":"https://openalex.org/I173029219","display_name":"Multimedia University","ror":"https://ror.org/04zrbnc33","country_code":"MY","type":"education","lineage":["https://openalex.org/I173029219"]},{"id":"https://openalex.org/I4405258384","display_name":"Berlin School of Business and Innovation GmbH","ror":"https://ror.org/00jkcvh93","country_code":"DE","type":"education","lineage":["https://openalex.org/I4405258384"]}],"countries":["DE","MY"],"is_corresponding":false,"raw_author_name":"Fahmid Al Farid","raw_affiliation_strings":["Berlin School of Business and Innovation (BSBI)","Centre for Image and Vision Computing (CIVC), Faculty of Artificial Intelligence and Engineering, Multimedia University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Berlin School of Business and Innovation (BSBI)","institution_ids":["https://openalex.org/I4405258384"]},{"raw_affiliation_string":"Centre for Image and Vision Computing (CIVC), Faculty of Artificial Intelligence and Engineering, Multimedia University","institution_ids":["https://openalex.org/I173029219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135408503","display_name":"Jia Uddin","orcid":"https://orcid.org/0000-0002-3403-4095","observed_orcids":["https://orcid.org/0000-0002-3403-4095"]},"institutions":[{"id":"https://openalex.org/I85389745","display_name":"Woosong University","ror":"https://ror.org/02srty072","country_code":"KR","type":"education","lineage":["https://openalex.org/I85389745"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jia Uddin","raw_affiliation_strings":["Department of AI and Big Data, Endicott College, Woosong University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of AI and Big Data, Endicott College, Woosong University","institution_ids":["https://openalex.org/I85389745"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113404337","display_name":"Hezerul Bin Abdul Karim","orcid":"https://orcid.org/0000-0002-7613-4596","observed_orcids":["https://orcid.org/0000-0002-7613-4596"]},"institutions":[{"id":"https://openalex.org/I173029219","display_name":"Multimedia University","ror":"https://ror.org/04zrbnc33","country_code":"MY","type":"education","lineage":["https://openalex.org/I173029219"]}],"countries":["MY"],"is_corresponding":true,"raw_author_name":"Hezerul Bin Abdul Karim","raw_affiliation_strings":["Centre for Image and Vision Computing (CIVC), Faculty of Artificial Intelligence and Engineering, Multimedia University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Image and Vision Computing (CIVC), Faculty of Artificial Intelligence and Engineering, Multimedia University","institution_ids":["https://openalex.org/I173029219"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5113404337"],"corresponding_institution_ids":["https://openalex.org/I173029219"],"apc_list":{"value":1175,"currency":"CHF","value_usd":1418},"apc_paid":{"value":1175,"currency":"CHF","value_usd":1418},"fwci":7.1224,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.95631776,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"8","issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9585000276565552,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9585000276565552,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.04100000113248825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing-url-detection","display_name":"phishing URL detection","score":0.8740000128746033},{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.9950000047683716},{"id":"https://openalex.org/keywords/explanation-stability","display_name":"explanation stability","score":0.6050000190734863},{"id":"https://openalex.org/keywords/shap","display_name":"SHAP","score":0.8050000071525574},{"id":"https://openalex.org/keywords/unseen-attack-generalization","display_name":"unseen attack generalization","score":0.6919999718666077},{"id":"https://openalex.org/keywords/bert","display_name":"BERT","score":0.7670000195503235},{"id":"https://openalex.org/keywords/xgboost","display_name":"XGBoost","score":0.8650000095367432},{"id":"https://openalex.org/keywords/logistic-regression","display_name":"logistic regression","score":0.6050000190734863},{"id":"https://openalex.org/keywords/non-iid-data","display_name":"non-IID data","score":0.6570000052452087}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.8202000260353088},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.8047999739646912},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6765999794006348},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6101999878883362},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.47510001063346863},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4440999925136566},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.40869998931884766},{"id":"https://openalex.org/C151956035","wikidata":"https://www.wikidata.org/wiki/Q1132755","display_name":"Logistic regression","level":2,"score":0.3790999948978424},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.36320000886917114},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.33399999141693115},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3151000142097473},{"id":"https://openalex.org/C203519979","wikidata":"https://www.wikidata.org/wiki/Q865360","display_name":"Jaccard index","level":3,"score":0.271699994802475},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.27000001072883606},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.26440000534057617},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.2639999985694885},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C2989486834","wikidata":"https://www.wikidata.org/wiki/Q3808900","display_name":"True positive rate","level":2,"score":0.25279998779296875}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3389/fcomp.2026.1834407","doi":"https://doi.org/10.3389/fcomp.2026.1834407","is_oa":true,"landing_page_url":"https://doi.org/10.3389/fcomp.2026.1834407","pdf_url":"https://www.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2026.1834407/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","jufo-1","norway-1","poland-20","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},{"id":"pmh:oai:shdl.mmu.edu.my:16774","doi":null,"is_oa":false,"landing_page_url":"https://shdl.mmu.edu.my/16774/1/An%20integrated%20evaluation%20protocol%20for%20adversarial%20robustness%2C%20generalization%2C%20and%20explanation%20stability%20in%20URL-based%20phishing%20detection.pdf","pdf_url":"https://shdl.mmu.edu.my/16774/1/An%20integrated%20evaluation%20protocol%20for%20adversarial%20robustness%2C%20generalization%2C%20and%20explanation%20stability%20in%20URL-based%20phishing%20detection.pdf","source":{"id":"https://openalex.org/S4377196753","display_name":"Siti Hasmah Digital Library-MMU Institutiona Repository (Multimedia University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I173029219","host_organization_name":"Multimedia University","host_organization_lineage":["https://openalex.org/I173029219"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"pmh:oai:doaj.org/article:6b46f9946d2e4bcf961cf2d57689e68c","doi":null,"is_oa":false,"landing_page_url":"https://doaj.org/article/6b46f9946d2e4bcf961cf2d57689e68c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Frontiers in Computer Science, Vol 8 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3389/fcomp.2026.1834407","doi":"https://doi.org/10.3389/fcomp.2026.1834407","is_oa":true,"landing_page_url":"https://doi.org/10.3389/fcomp.2026.1834407","pdf_url":"https://www.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2026.1834407/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","jufo-1","norway-1","poland-20","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G622218618","display_name":null,"funder_award_id":"PostDoc(MMUI/240029)","funder_id":"https://openalex.org/F4320313202","funder_display_name":"Multimedia University"},{"id":"https://openalex.org/G8591213879","display_name":null,"funder_award_id":"MMUI/240029","funder_id":"https://openalex.org/F4320313202","funder_display_name":"Multimedia University"}],"funders":[{"id":"https://openalex.org/F4320313202","display_name":"Multimedia University","ror":"https://ror.org/04zrbnc33"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204853582.pdf","grobid_xml":"https://content.openalex.org/works/W7204853582.grobid-xml"},"referenced_works_count":43,"referenced_works":["https://openalex.org/W2028138594","https://openalex.org/W2190286163","https://openalex.org/W2293768274","https://openalex.org/W2295598076","https://openalex.org/W2773446523","https://openalex.org/W2806379428","https://openalex.org/W2962843949","https://openalex.org/W3005086430","https://openalex.org/W3035510612","https://openalex.org/W3085804088","https://openalex.org/W3111962011","https://openalex.org/W3133843004","https://openalex.org/W3168587836","https://openalex.org/W4221141431","https://openalex.org/W4281483860","https://openalex.org/W4313196990","https://openalex.org/W4362660818","https://openalex.org/W4383671701","https://openalex.org/W4387668052","https://openalex.org/W4387735260","https://openalex.org/W4387826905","https://openalex.org/W4388593521","https://openalex.org/W4391925589","https://openalex.org/W4391933803","https://openalex.org/W4393969292","https://openalex.org/W4402298365","https://openalex.org/W4403734306","https://openalex.org/W4403759070","https://openalex.org/W4403847908","https://openalex.org/W4404075990","https://openalex.org/W4404569134","https://openalex.org/W4404628892","https://openalex.org/W4405654320","https://openalex.org/W4409724237","https://openalex.org/W4410644253","https://openalex.org/W4412014546","https://openalex.org/W4412434458","https://openalex.org/W4412844509","https://openalex.org/W4413636542","https://openalex.org/W4414406619","https://openalex.org/W4414472508","https://openalex.org/W4414516546","https://openalex.org/W4416928939"],"related_works":["https://openalex.org/W7134908535","https://openalex.org/W7205708120","https://openalex.org/W7163589484","https://openalex.org/W7219785817","https://openalex.org/W7153346337","https://openalex.org/W7160333618","https://openalex.org/W7167466919","https://openalex.org/W7154104900","https://openalex.org/W7163821602","https://openalex.org/W4313196990"],"abstract_inverted_index":{"Introduction":[0],"The":[1,52],"reliability":[2,200],"of":[3,72,118,164],"phishing":[4,32,74,83,194],"Uniform":[5],"Resource":[6],"Locator":[7],"(URL)":[8],"detectors":[9],"under":[10,108,181,201],"adversarial":[11,37,203],"URL":[12,110,195],"rewriting,":[13],"domain":[14],"shift,":[15],"and":[16,47,63,75,122,140,157,166,204],"explanation":[17,45],"instability":[18],"remains":[19],"insufficiently":[20],"understood.":[21],"This":[22],"study":[23],"proposes":[24],"an":[25],"integrated":[26],"robustness":[27,105],"evaluation":[28,144],"protocol":[29,53],"for":[30,85,153,191,197],"URL-based":[31],"detection,":[33],"which":[34],"integrates":[35],"structured":[36],"perturbation,":[38],"unseen":[39,150],"attack-family":[40],"generalization,":[41],"compositional":[42],"attack":[43],"effects,":[44],"stability,":[46],"external":[48,86],"vulnerability":[49],"transfer.":[50],"Methods":[51],"tests":[54],"four":[55],"representative":[56],"model":[57],"families:":[58],"Logistic":[59,119,155],"Regression,":[60,120],"XGBoost,":[61,121,158],"CharCNN,":[62],"BERT-base,":[64],"using":[65],"235,370":[66],"validated":[67],"URLs":[68,84],"from":[69,99],"PHIUSIIL,":[70],"consisting":[71],"100,520":[73],"134,850":[76],"benign":[77],"URLs,":[78],"along":[79],"with":[80,159,173],"49,121":[81],"PhishTank-validated":[82],"validation.":[87],"Results":[88],"All":[89],"models":[90],"performed":[91],"well":[92],"on":[93],"the":[94,115,130],"clean":[95],"test":[96],"sets,":[97],"ranging":[98],"0.9962":[100],"to":[101,124,129,137,149,179],"0.9984,":[102],"but":[103],"their":[104],"decreased":[106],"substantially":[107],"realistic":[109,202],"mutations.":[111],"Subdomain":[112],"injection":[113],"degraded":[114],"strong":[116],"performance":[117],"CharCNN":[123],"around":[125],"0.432,":[126],"indicating":[127],"collapse":[128],"phishing-prevalence":[131],"floor.":[132],"BERT":[133],"was":[134],"highly":[135],"susceptible":[136],"homoglyph,":[138],"padding,":[139],"path-based":[141],"perturbations.":[142],"Leave-one-family-out":[143],"also":[145,171],"showed":[146],"poor":[147],"transfer":[148],"subdomain":[151,182],"attacks":[152],"both":[154],"Regression":[156],"Robustness":[160],"Degradation":[161],"Index":[162],"values":[163],"0.535":[165],"0.565,":[167],"respectively.":[168],"Explanation":[169],"stability":[170],"suffered,":[172],"SHAP":[174],"top-K":[175],"Jaccard":[176],"similarity":[177],"dropping":[178],"0.526-0.535":[180],"perturbation.":[183],"Discussion":[184],"These":[185],"results":[186],"provide":[187],"a":[188],"solid":[189],"benchmark":[190],"evaluating":[192],"robustness-aware":[193],"detection":[196],"achieving":[198],"deployable":[199],"non-IID":[205],"settings.":[206]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-09-01T00:00:00"}