{"id":"https://openalex.org/W2888558158","doi":"https://doi.org/10.1109/tdsc.2018.2864993","title":"Learning from the Ones that Got Away: Detecting New Forms of Phishing Attacks","display_name":"Learning from the Ones that Got Away: Detecting New Forms of Phishing Attacks","publication_year":2018,"publication_date":"2018-08-20","ids":{"openalex":"https://openalex.org/W2888558158","doi":"https://doi.org/10.1109/tdsc.2018.2864993","mag":"2888558158"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2018.2864993","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2018.2864993","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012696341","display_name":"Christopher Gutierrez","orcid":"https://orcid.org/0000-0002-5037-4591"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher N. Gutierrez","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":"https://orcid.org/0000-0002-5037-4591","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100741147","display_name":"Taegyu Kim","orcid":"https://orcid.org/0000-0002-4406-4415"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Taegyu Kim","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009991455","display_name":"Raffaele Della Corte","orcid":"https://orcid.org/0000-0002-1280-6875"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Raffaele Della Corte","raw_affiliation_strings":["Universit\u00e1 degli Studi di Napoli Federico II, Napoli, NA, Italy"],"raw_orcid":"https://orcid.org/0000-0002-1280-6875","affiliations":[{"raw_affiliation_string":"Universit\u00e1 degli Studi di Napoli Federico II, Napoli, NA, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034593385","display_name":"Jeffrey Avery","orcid":null},"institutions":[{"id":"https://openalex.org/I2948394018","display_name":"Northrop Grumman (United States)","ror":"https://ror.org/05kewds18","country_code":"US","type":"company","lineage":["https://openalex.org/I2948394018"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jeffrey Avery","raw_affiliation_strings":["Northrop Grumman Corporation, Falls Church, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northrop Grumman Corporation, Falls Church, VA, USA","institution_ids":["https://openalex.org/I2948394018"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032121234","display_name":"Dan Goldwasser","orcid":"https://orcid.org/0000-0001-9326-8601"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dan Goldwasser","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064715170","display_name":"Marcello Cinque","orcid":"https://orcid.org/0000-0003-1455-8614"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marcello Cinque","raw_affiliation_strings":["Universit\u00e1 degli Studi di Napoli Federico II, Napoli, NA, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universit\u00e1 degli Studi di Napoli Federico II, Napoli, NA, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047310442","display_name":"Saurabh Bagchi","orcid":"https://orcid.org/0000-0002-4239-5632"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saurabh Bagchi","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":"https://orcid.org/0000-0002-4239-5632","affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":12.7506,"has_fulltext":false,"cited_by_count":86,"citation_normalized_percentile":{"value":0.98636515,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"15","issue":"6","first_page":"988","last_page":"1001"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.9666827917098999},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8444230556488037},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.6876211762428284},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5001585483551025},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.49962639808654785},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46209731698036194},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.44884192943573},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3484463691711426},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3368619680404663},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.28708988428115845},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.08045953512191772}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.9666827917098999},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8444230556488037},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.6876211762428284},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5001585483551025},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.49962639808654785},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46209731698036194},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.44884192943573},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3484463691711426},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3368619680404663},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.28708988428115845},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08045953512191772}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2018.2864993","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2018.2864993","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320308204","display_name":"Northrop Grumman","ror":"https://ror.org/05kewds18"},{"id":"https://openalex.org/F4320309036","display_name":"Purdue University","ror":"https://ror.org/02dqehb95"},{"id":"https://openalex.org/F4320309590","display_name":"Universit\u00e0 degli Studi di Napoli Federico II","ror":"https://ror.org/05290cv24"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W123634342","https://openalex.org/W135902891","https://openalex.org/W150462035","https://openalex.org/W1521626219","https://openalex.org/W1567605630","https://openalex.org/W1584126125","https://openalex.org/W1880332085","https://openalex.org/W2028223155","https://openalex.org/W2055077097","https://openalex.org/W2094728533","https://openalex.org/W2123442489","https://openalex.org/W2134750673","https://openalex.org/W2135107501","https://openalex.org/W2156852385","https://openalex.org/W2248721531","https://openalex.org/W2295731716","https://openalex.org/W2310347995","https://openalex.org/W2520599539","https://openalex.org/W2606751384","https://openalex.org/W2734581193","https://openalex.org/W4254325038","https://openalex.org/W6604955867","https://openalex.org/W6605567061","https://openalex.org/W6606002744","https://openalex.org/W6635032660","https://openalex.org/W6680470464","https://openalex.org/W6683330213","https://openalex.org/W6691558876","https://openalex.org/W6696870837"],"related_works":["https://openalex.org/W2149202530","https://openalex.org/W2807822918","https://openalex.org/W2921723332","https://openalex.org/W2482950156","https://openalex.org/W3042334625","https://openalex.org/W3139248031","https://openalex.org/W4200017362","https://openalex.org/W2305322260","https://openalex.org/W2118123121","https://openalex.org/W4388020458"],"abstract_inverted_index":{"Phishing":[0],"attacks":[1],"continue":[2],"to":[3,35,46,82,87,94,202],"pose":[4],"a":[5,18,57,63,80,107,119,157,166],"major":[6],"threat":[7],"for":[8,77],"computer":[9],"system":[10,81],"defenders,":[11],"often":[12],"forming":[13],"the":[14,47,54,114,127,147,200,204],"first":[15],"step":[16],"in":[17,27],"multi-stage":[19],"attack.":[20],"There":[21],"have":[22],"been":[23],"great":[24],"strides":[25],"made":[26],"phishing":[28,32,67,97,111,134],"detection;":[29],"however,":[30],"some":[31,86],"emails":[33,112,148],"appear":[34],"pass":[36],"through":[37,53],"filters":[38],"by":[39],"making":[40],"simple":[41],"structural":[42],"and":[43,68],"semantic":[44],"changes":[45],"messages.":[48],"We":[49,71,172],"tackle":[50],"this":[51],"problem":[52],"use":[55],"of":[56,66,110,124,146,155,178],"machine":[58],"learning":[59],"classifier":[60,205],"operating":[61],"on":[62,126,133],"large":[64,108],"corpus":[65,109],"legitimate":[69],"emails.":[70],"design":[72],"SAFe-PC":[73,103,125,140],"(Semi-Automated":[74],"Feature":[75],"generation":[76],"Phish":[78],"Classification),":[79],"extract":[83],"features,":[84,90],"elevating":[85],"higher":[88],"level":[89],"that":[91,149,180],"are":[92,197],"meant":[93],"defeat":[95],"common":[96],"email":[98,159,169],"detection":[99,189],"strategies.":[100],"To":[101],"evaluate":[102],",":[104],"we":[105],"collect":[106],"from":[113],"central":[115],"IT":[116],"organization":[117],"at":[118,137],"tier-1":[120],"university.":[121],"The":[122],"execution":[123],"dataset":[128],"exposes":[129],"hitherto":[130],"unknown":[131],"insights":[132],"campaigns":[135],"directed":[136],"university":[138],"users.":[139],"detects":[141],"more":[142],"than":[143],"70":[144],"percent":[145],"had":[150],"eluded":[151],"our":[152],"production":[153],"deployment":[154],"Sophos,":[156],"state-of-the-art":[158],"filtering":[160,170],"tool.":[161,171],"It":[162],"also":[163,173],"outperforms":[164],"SpamAssassin,":[165],"commonly":[167],"used":[168],"developed":[174],"an":[175],"online":[176],"version":[177],"SAFe-PC,":[179],"can":[181],"be":[182],"incrementally":[183],"retrained":[184],"with":[185,192],"new":[186,195],"samples.":[187],"Its":[188],"performance":[190],"improves":[191],"time":[193,201],"as":[194],"samples":[196],"collected,":[198],"while":[199],"retrain":[203],"stays":[206],"constant.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":15},{"year":2022,"cited_by_count":16},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":12},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}