{"id":"https://openalex.org/W7147315601","doi":"https://doi.org/10.1109/icaiic68212.2026.11454243","title":"Enhancing Email Security: Adaptive Detection Systems for Sophisticated Threats","display_name":"Enhancing Email Security: Adaptive Detection Systems for Sophisticated Threats","publication_year":2026,"publication_date":"2026-02-24","ids":{"openalex":"https://openalex.org/W7147315601","doi":"https://doi.org/10.1109/icaiic68212.2026.11454243"},"language":null,"primary_location":{"id":"doi:10.1109/icaiic68212.2026.11454243","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icaiic68212.2026.11454243","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Conference on Artificial Intelligence in Information and Communication (ICAIIC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5132569718","display_name":"Firas Abdel Nour","orcid":null},"institutions":[{"id":"https://openalex.org/I4210090878","display_name":"Arab Open University","ror":"https://ror.org/00d260p98","country_code":"LB","type":"education","lineage":["https://openalex.org/I4210090878","https://openalex.org/I4210093932"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Firas Abdel Nour","raw_affiliation_strings":["Arab Open University,Faculty of Computer Studies,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arab Open University,Faculty of Computer Studies,Beirut,Lebanon","institution_ids":["https://openalex.org/I4210090878"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066016612","display_name":"Makram W. Hatoum","orcid":"https://orcid.org/0000-0002-4729-3547"},"institutions":[{"id":"https://openalex.org/I4210090878","display_name":"Arab Open University","ror":"https://ror.org/00d260p98","country_code":"LB","type":"education","lineage":["https://openalex.org/I4210090878","https://openalex.org/I4210093932"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Makram Hatoum","raw_affiliation_strings":["Arab Open University,Faculty of Computer Studies,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arab Open University,Faculty of Computer Studies,Beirut,Lebanon","institution_ids":["https://openalex.org/I4210090878"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041444031","display_name":"Ali El Attar","orcid":null},"institutions":[{"id":"https://openalex.org/I4210090878","display_name":"Arab Open University","ror":"https://ror.org/00d260p98","country_code":"LB","type":"education","lineage":["https://openalex.org/I4210090878","https://openalex.org/I4210093932"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Ali El Attar","raw_affiliation_strings":["Arab Open University,Faculty of Computer Studies,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arab Open University,Faculty of Computer Studies,Beirut,Lebanon","institution_ids":["https://openalex.org/I4210090878"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5129664385","display_name":"Mohammed El-Hajj","orcid":null},"institutions":[{"id":"https://openalex.org/I4210090878","display_name":"Arab Open University","ror":"https://ror.org/00d260p98","country_code":"LB","type":"education","lineage":["https://openalex.org/I4210090878","https://openalex.org/I4210093932"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Mohammed El-Hajj","raw_affiliation_strings":["Arab Open University,Faculty of Computer Studies,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arab Open University,Faculty of Computer Studies,Beirut,Lebanon","institution_ids":["https://openalex.org/I4210090878"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132710293","display_name":"Maya Dawood","orcid":null},"institutions":[{"id":"https://openalex.org/I4210090878","display_name":"Arab Open University","ror":"https://ror.org/00d260p98","country_code":"LB","type":"education","lineage":["https://openalex.org/I4210090878","https://openalex.org/I4210093932"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Maya Dawood","raw_affiliation_strings":["Arab Open University,Faculty of Computer Studies,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arab Open University,Faculty of Computer Studies,Beirut,Lebanon","institution_ids":["https://openalex.org/I4210090878"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5132674544","display_name":"Ahmad Mikati","orcid":null},"institutions":[{"id":"https://openalex.org/I4210090878","display_name":"Arab Open University","ror":"https://ror.org/00d260p98","country_code":"LB","type":"education","lineage":["https://openalex.org/I4210090878","https://openalex.org/I4210093932"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Ahmad Mikati","raw_affiliation_strings":["Arab Open University,Faculty of Computer Studies,Beirut,Lebanon"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arab Open University,Faculty of Computer Studies,Beirut,Lebanon","institution_ids":["https://openalex.org/I4210090878"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210090878"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.42146065,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1098","last_page":"1103"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.0034000000450760126,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.0015999999595806003,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5447999835014343},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.5267999768257141},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.5205000042915344},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.4300000071525574},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.39629998803138733},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.3582000136375427},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.3441999852657318},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.3393000066280365}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8051999807357788},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5447999835014343},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5296000242233276},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.5267999768257141},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.5205000042915344},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5141000151634216},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.4300000071525574},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.39649999141693115},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.39629998803138733},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3582000136375427},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35269999504089355},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.3441999852657318},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.3393000066280365},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3382999897003174},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.33160001039505005},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.32280001044273376},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.2883000075817108},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.28139999508857727},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2791000008583069},{"id":"https://openalex.org/C158955206","wikidata":"https://www.wikidata.org/wiki/Q83058","display_name":"Spamming","level":3,"score":0.27889999747276306},{"id":"https://openalex.org/C58166","wikidata":"https://www.wikidata.org/wiki/Q224821","display_name":"Fuzzy logic","level":2,"score":0.2662000060081482},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.263700008392334},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2590999901294708},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.25690001249313354}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icaiic68212.2026.11454243","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icaiic68212.2026.11454243","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Conference on Artificial Intelligence in Information and Communication (ICAIIC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W2094603098","https://openalex.org/W2613498170","https://openalex.org/W3020917209","https://openalex.org/W3090717071","https://openalex.org/W4213081600","https://openalex.org/W4226159162","https://openalex.org/W4312175825","https://openalex.org/W4381161942","https://openalex.org/W4381279902","https://openalex.org/W4386377326","https://openalex.org/W4387805262","https://openalex.org/W4388934690","https://openalex.org/W4395955474","https://openalex.org/W4399273467","https://openalex.org/W4402925642","https://openalex.org/W4405601039","https://openalex.org/W4414472508"],"related_works":[],"abstract_inverted_index":{"Email":[0],"remains":[1],"the":[2,104],"most":[3],"targeted":[4],"vector":[5],"for":[6,60],"cyberattacks,":[7],"with":[8,57,107],"phishing":[9],"and":[10,15,34,62,75,90,98,114,157,165],"spam":[11,89],"causing":[12],"severe":[13],"financial":[14],"reputational":[16],"damage":[17],"worldwide.":[18],"Although":[19],"machine":[20],"learning":[21,56],"(ML)":[22],"has":[23],"improved":[24],"detection":[25,52,140],"accuracy,":[26,109,153],"current":[27],"systems":[28],"still":[29],"face":[30],"challenges":[31],"balancing":[32],"precision":[33],"efficiency":[35],"under":[36],"high-volume":[37],"conditions":[38],"that":[39],"can":[40],"trigger":[41],"resource":[42,166],"exhaustion":[43,167],"attacks.":[44,168],"This":[45],"paper":[46],"introduces":[47],"an":[48,155],"adaptive":[49],"email":[50],"threat":[51],"framework":[53],"combining":[54],"deep":[55],"fuzzy":[58],"hashing":[59],"accuracy":[61],"speed.":[63],"Five":[64],"models:":[65],"Random":[66],"Forest,":[67],"Support":[68],"Vector":[69],"Machine,":[70],"LSTM,":[71],"Bidirectional":[72,76],"LSTM":[73],"(BLSTM),":[74],"GRU":[77],"were":[78],"trained":[79],"on":[80,127],"85,736":[81],"emails":[82],"spanning":[83],"2000":[84],"to":[85,145],"2024,":[86],"including":[87],"50,374":[88],"35,362":[91],"legitimate":[92],"messages":[93],"from":[94,142],"CEAS,":[95],"Enron,":[96],"Ling-Spam,":[97],"2023-2024":[99],"archives.":[100],"The":[101],"BLSTM":[102],"achieved":[103],"best":[105],"performance":[106],"99.18%":[108],"99.00%":[110],"precision,":[111],"99.25%":[112],"recall,":[113],"a":[115],"99.17%":[116],"F1-score,":[117],"outperforming":[118],"ML":[119],"baselines":[120],"(RF:":[121],"98.92%,":[122],"SVM:":[123],"98.72%).":[124],"Cross-temporal":[125],"validation":[126],"unseen":[128],"2023":[129],"data":[130],"confirmed":[131],"strong":[132],"generalization":[133],"(96.25%).":[134],"A":[135],"hybrid":[136],"BLSTM-SSDEEP":[137],"system":[138],"reduced":[139],"time":[141],"65.19":[143],"s":[144,147],"14.74":[146],"(77.4%":[148],"faster)":[149],"while":[150],"sustaining":[151],"99%":[152],"demonstrating":[154],"effective":[156],"scalable":[158],"defense":[159],"against":[160],"polymorphic":[161],"phishing,":[162],"large-scale":[163],"spam,":[164]},"counts_by_year":[],"updated_date":"2026-04-02T13:53:19.096889","created_date":"2026-04-02T00:00:00"}