{"id":"https://openalex.org/W3170566557","doi":"https://doi.org/10.1109/cscwd49262.2021.9437758","title":"Spear Phishing Emails Detection Based on Machine Learning","display_name":"Spear Phishing Emails Detection Based on Machine Learning","publication_year":2021,"publication_date":"2021-05-05","ids":{"openalex":"https://openalex.org/W3170566557","doi":"https://doi.org/10.1109/cscwd49262.2021.9437758","mag":"3170566557"},"language":"en","primary_location":{"id":"doi:10.1109/cscwd49262.2021.9437758","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cscwd49262.2021.9437758","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 24th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054788092","display_name":"Xiong Ding","orcid":"https://orcid.org/0000-0003-0437-0589"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xiong Ding","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031113046","display_name":"Baoxu Liu","orcid":"https://orcid.org/0009-0006-9851-5548"},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Baoxu Liu","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020151253","display_name":"Zhengwei Jiang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhengwei Jiang","raw_affiliation_strings":["School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100647376","display_name":"Qiuyun Wang","orcid":"https://orcid.org/0000-0001-6101-9715"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiuyun Wang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056512345","display_name":"Liling Xin","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liling Xin","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5054788092"],"corresponding_institution_ids":["https://openalex.org/I4210165038"],"apc_list":null,"apc_paid":null,"fwci":2.4787,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.90698794,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"354","last_page":"359"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.9455151557922363},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7220359444618225},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5290821194648743},{"id":"https://openalex.org/keywords/reputation","display_name":"Reputation","score":0.49790430068969727},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.497283011674881},{"id":"https://openalex.org/keywords/electronic-mail","display_name":"Electronic mail","score":0.41735056042671204},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40964949131011963},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3331194519996643},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.31703299283981323}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.9455151557922363},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7220359444618225},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5290821194648743},{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.49790430068969727},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.497283011674881},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.41735056042671204},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40964949131011963},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3331194519996643},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.31703299283981323},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cscwd49262.2021.9437758","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cscwd49262.2021.9437758","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 24th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4699999988079071,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G655571959","display_name":null,"funder_award_id":"2016YFB08 01004","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W50596167","https://openalex.org/W1442570287","https://openalex.org/W1996660070","https://openalex.org/W2012833704","https://openalex.org/W2071254787","https://openalex.org/W2097958165","https://openalex.org/W2132791018","https://openalex.org/W2148143831","https://openalex.org/W2148403395","https://openalex.org/W2156852385","https://openalex.org/W2166179755","https://openalex.org/W2488334223","https://openalex.org/W2514696089","https://openalex.org/W2544613100","https://openalex.org/W2806633702","https://openalex.org/W2891807831","https://openalex.org/W4230940751"],"related_works":["https://openalex.org/W2149202530","https://openalex.org/W2807822918","https://openalex.org/W2921723332","https://openalex.org/W2482950156","https://openalex.org/W4396966040","https://openalex.org/W2305322260","https://openalex.org/W3139248031","https://openalex.org/W3042334625","https://openalex.org/W2034179494","https://openalex.org/W4221100201"],"abstract_inverted_index":{"Spear":[0],"phishing":[1,17,57,125,129,137,142],"emails":[2,58,126,138],"target":[3],"to":[4,41,54,108,122,147],"specific":[5],"individual":[6],"or":[7],"organization,":[8],"they":[9],"are":[10],"more":[11],"elaborated,":[12],"targeted,":[13],"and":[14,37,80,92,139,157,169],"harmful":[15],"than":[16],"emails.":[18,130,143],"The":[19],"attackers":[20],"usually":[21],"harvest":[22],"information":[23],"about":[24],"the":[25,39,110,162],"recipient":[26,40],"in":[27],"any":[28],"available":[29],"ways,":[30],"then":[31],"create":[32],"a":[33,50,149],"carefully":[34],"camouflaged":[35],"email":[36],"lure":[38],"perform":[42],"dangerous":[43],"actions.":[44],"In":[45],"this":[46],"paper":[47],"we":[48,64,96,116],"present":[49],"new":[51],"effective":[52],"approach":[53],"detect":[55],"spear":[56,124,136],"based":[59],"on":[60,100],"machine":[61,119],"learning.":[62],"Firstly":[63],"extracted":[65],"21":[66],"Stylometric":[67],"features":[68,73,83,168],"from":[69,74,84,127],"email,":[70],"3":[71,81],"forwarding":[72,165],"Email":[75],"Forwarding":[76],"Relationship":[77],"Graph":[78],"Database(EFRGD),":[79],"reputation":[82,167],"two":[85],"third-party":[86],"threat":[87],"intelligence":[88],"platforms,":[89],"Virus":[90],"Total(VT)":[91],"Phish":[93],"Tank(PT).":[94],"Then":[95],"made":[97],"an":[98],"improvement":[99],"Synthetic":[101],"Minority":[102],"Oversampling":[103],"Technique(SMOTE)":[104],"algorithm":[105],"named":[106],"KM-SMOTE":[107,170],"reduce":[109],"impact":[111],"of":[112,134,152,155,159,164],"unbalanced":[113],"data.":[114],"Finally":[115],"applied":[117],"4":[118],"learning":[120],"algorithms":[121],"distinguish":[123],"non-spear":[128,141],"Our":[131],"dataset":[132],"consists":[133],"417":[135],"13916":[140],"We":[144],"were":[145],"able":[146],"achieve":[148],"maximum":[150],"recall":[151],"95.56%,":[153],"precision":[154],"98.85%":[156],"97.16%":[158],"F1-score":[160],"with":[161],"help":[163],"features,":[166],"algorithm.":[171]},"counts_by_year":[{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}