{"id":"https://openalex.org/W4414472508","doi":"https://doi.org/10.1177/18724981251366763","title":"Machine learning techniques for phishing detection: A review of methods, challenges, and future directions","display_name":"Machine learning techniques for phishing detection: A review of methods, challenges, and future directions","publication_year":2025,"publication_date":"2025-09-24","ids":{"openalex":"https://openalex.org/W4414472508","doi":"https://doi.org/10.1177/18724981251366763"},"language":"en","primary_location":{"id":"doi:10.1177/18724981251366763","is_oa":false,"landing_page_url":"https://doi.org/10.1177/18724981251366763","pdf_url":null,"source":{"id":"https://openalex.org/S119727669","display_name":"Intelligent Decision Technologies","issn_l":"1872-4981","issn":["1872-4981","1875-8843"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Intelligent Decision Technologies","raw_type":"journal-article"},"type":"review","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119717417","display_name":"Eleni Kytidou","orcid":null},"institutions":[{"id":"https://openalex.org/I147962203","display_name":"Democritus University of Thrace","ror":"https://ror.org/03bfqnx40","country_code":"GR","type":"education","lineage":["https://openalex.org/I147962203"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Eleni Kytidou","raw_affiliation_strings":["Department of Informatics, Democritus University of Thrace, Kavala, Greece"],"raw_orcid":"https://orcid.org/0009-0009-1586-8586","affiliations":[{"raw_affiliation_string":"Department of Informatics, Democritus University of Thrace, Kavala, Greece","institution_ids":["https://openalex.org/I147962203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119717418","display_name":"Theodosia Tsikriki","orcid":null},"institutions":[{"id":"https://openalex.org/I147962203","display_name":"Democritus University of Thrace","ror":"https://ror.org/03bfqnx40","country_code":"GR","type":"education","lineage":["https://openalex.org/I147962203"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Theodosia Tsikriki","raw_affiliation_strings":["Department of Informatics, Democritus University of Thrace, Kavala, Greece"],"raw_orcid":"https://orcid.org/0009-0002-4250-5018","affiliations":[{"raw_affiliation_string":"Department of Informatics, Democritus University of Thrace, Kavala, Greece","institution_ids":["https://openalex.org/I147962203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020259169","display_name":"George Drosatos","orcid":"https://orcid.org/0000-0002-8130-5775"},"institutions":[{"id":"https://openalex.org/I4210098364","display_name":"Institute for Language and Speech Processing","ror":"https://ror.org/00z24kr14","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210098364"]},{"id":"https://openalex.org/I4210156054","display_name":"Athena Research and Innovation Center In Information Communication & Knowledge Technologies","ror":"https://ror.org/0576by029","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210156054"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"George Drosatos","raw_affiliation_strings":["Athena Research Center","Institute for Language and Speech Processing, Athena Research Center, Xanthi, Greece"],"raw_orcid":"https://orcid.org/0000-0002-8130-5775","affiliations":[{"raw_affiliation_string":"Athena Research Center","institution_ids":["https://openalex.org/I4210156054"]},{"raw_affiliation_string":"Institute for Language and Speech Processing, Athena Research Center, Xanthi, Greece","institution_ids":["https://openalex.org/I4210098364"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010152963","display_name":"Konstantinos Rantos","orcid":"https://orcid.org/0000-0003-2453-3904"},"institutions":[{"id":"https://openalex.org/I147962203","display_name":"Democritus University of Thrace","ror":"https://ror.org/03bfqnx40","country_code":"GR","type":"education","lineage":["https://openalex.org/I147962203"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Konstantinos Rantos","raw_affiliation_strings":["Department of Informatics, Democritus University of Thrace, Kavala, Greece"],"raw_orcid":"https://orcid.org/0000-0003-2453-3904","affiliations":[{"raw_affiliation_string":"Department of Informatics, Democritus University of Thrace, Kavala, Greece","institution_ids":["https://openalex.org/I147962203"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5020259169"],"corresponding_institution_ids":["https://openalex.org/I4210098364","https://openalex.org/I4210156054"],"apc_list":null,"apc_paid":null,"fwci":4.6688,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.95370215,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"19","issue":"6","first_page":"4356","last_page":"4379"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.984000027179718,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.8791000247001648},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5566999912261963},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5390999913215637},{"id":"https://openalex.org/keywords/deception","display_name":"Deception","score":0.4832000136375427},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.45190000534057617},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4278999865055084},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.42669999599456787},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.40689998865127563},{"id":"https://openalex.org/keywords/pace","display_name":"Pace","score":0.3662000000476837}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.8791000247001648},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7204999923706055},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6776999831199646},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6276000142097473},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5566999912261963},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5390999913215637},{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.4832000136375427},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.45190000534057617},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4278999865055084},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.42669999599456787},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.40689998865127563},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3702000081539154},{"id":"https://openalex.org/C2777526511","wikidata":"https://www.wikidata.org/wiki/Q691543","display_name":"Pace","level":2,"score":0.3662000000476837},{"id":"https://openalex.org/C105002631","wikidata":"https://www.wikidata.org/wiki/Q4833645","display_name":"Subject-matter expert","level":3,"score":0.33889999985694885},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.33719998598098755},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.3319000005722046},{"id":"https://openalex.org/C70118762","wikidata":"https://www.wikidata.org/wiki/Q376934","display_name":"Social engineering (security)","level":2,"score":0.3228999972343445},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3174000084400177},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.30410000681877136},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3028999865055084},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2996000051498413},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.289900004863739},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.28369998931884766},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.2815000116825104},{"id":"https://openalex.org/C164614171","wikidata":"https://www.wikidata.org/wiki/Q5204775","display_name":"DECIPHER","level":2,"score":0.2766999900341034},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.2685000002384186},{"id":"https://openalex.org/C199033989","wikidata":"https://www.wikidata.org/wiki/Q1318295","display_name":"Narrative","level":2,"score":0.2669000029563904},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.26420000195503235},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.25619998574256897},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.25600001215934753},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2517000138759613}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1177/18724981251366763","is_oa":false,"landing_page_url":"https://doi.org/10.1177/18724981251366763","pdf_url":null,"source":{"id":"https://openalex.org/S119727669","display_name":"Intelligent Decision Technologies","issn_l":"1872-4981","issn":["1872-4981","1875-8843"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Intelligent Decision Technologies","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":108,"referenced_works":["https://openalex.org/W1985920648","https://openalex.org/W1990188874","https://openalex.org/W2052176706","https://openalex.org/W2064326940","https://openalex.org/W2113449956","https://openalex.org/W2128986188","https://openalex.org/W2135867524","https://openalex.org/W2158045646","https://openalex.org/W2161983758","https://openalex.org/W2418966180","https://openalex.org/W2606347182","https://openalex.org/W2617931097","https://openalex.org/W2617978315","https://openalex.org/W2774583378","https://openalex.org/W2794609498","https://openalex.org/W2890718808","https://openalex.org/W2909737018","https://openalex.org/W2944669302","https://openalex.org/W2963834533","https://openalex.org/W3003583062","https://openalex.org/W3004150164","https://openalex.org/W3018772204","https://openalex.org/W3048764235","https://openalex.org/W3085804088","https://openalex.org/W3089043621","https://openalex.org/W3090717071","https://openalex.org/W3092531413","https://openalex.org/W3105217250","https://openalex.org/W3112545613","https://openalex.org/W3121960994","https://openalex.org/W3123820292","https://openalex.org/W3128595410","https://openalex.org/W3136309636","https://openalex.org/W3165229798","https://openalex.org/W3168587836","https://openalex.org/W3173117104","https://openalex.org/W3193944778","https://openalex.org/W3195446130","https://openalex.org/W3205702936","https://openalex.org/W3209545352","https://openalex.org/W4200452047","https://openalex.org/W4210343783","https://openalex.org/W4213446467","https://openalex.org/W4224300633","https://openalex.org/W4225162169","https://openalex.org/W4229332918","https://openalex.org/W4283210272","https://openalex.org/W4295854586","https://openalex.org/W4306406255","https://openalex.org/W4312390560","https://openalex.org/W4313035524","https://openalex.org/W4313451483","https://openalex.org/W4313492216","https://openalex.org/W4313887253","https://openalex.org/W4315643577","https://openalex.org/W4315767683","https://openalex.org/W4319312598","https://openalex.org/W4319996419","https://openalex.org/W4323065767","https://openalex.org/W4323307499","https://openalex.org/W4324046881","https://openalex.org/W4362660818","https://openalex.org/W4372049079","https://openalex.org/W4372049375","https://openalex.org/W4375865086","https://openalex.org/W4378070977","https://openalex.org/W4378420182","https://openalex.org/W4378805743","https://openalex.org/W4383501560","https://openalex.org/W4384559276","https://openalex.org/W4385864022","https://openalex.org/W4386211346","https://openalex.org/W4386858430","https://openalex.org/W4387645609","https://openalex.org/W4387746080","https://openalex.org/W4387826905","https://openalex.org/W4388496272","https://openalex.org/W4388938001","https://openalex.org/W4389236267","https://openalex.org/W4390188828","https://openalex.org/W4390550878","https://openalex.org/W4390643523","https://openalex.org/W4391182755","https://openalex.org/W4391925589","https://openalex.org/W4392408397","https://openalex.org/W4392544125","https://openalex.org/W4392546495","https://openalex.org/W4393066028","https://openalex.org/W4394881298","https://openalex.org/W4395471144","https://openalex.org/W4396710627","https://openalex.org/W4399477596","https://openalex.org/W4399477612","https://openalex.org/W4400234048","https://openalex.org/W4401751937","https://openalex.org/W4402633120","https://openalex.org/W4403734306","https://openalex.org/W4405654320","https://openalex.org/W4406495636","https://openalex.org/W4406556301","https://openalex.org/W4407690607","https://openalex.org/W4407928045","https://openalex.org/W4407937106","https://openalex.org/W4408015784","https://openalex.org/W4409357298","https://openalex.org/W4409603866","https://openalex.org/W4409965620","https://openalex.org/W4411205956"],"related_works":[],"abstract_inverted_index":{"Phishing":[0],"remains":[1],"a":[2,74],"persistent":[3],"and":[4,23,45,63,95,104,116,133,156,164],"evolving":[5],"cybersecurity":[6],"challenge,":[7],"leveraging":[8],"deception":[9],"to":[10,27,37,66,171,177],"manipulate":[11],"users":[12],"into":[13],"disclosing":[14],"confidential":[15],"information.":[16],"Traditional":[17],"detection":[18,69,81,148,182],"techniques,":[19],"such":[20,57],"as":[21,51,58],"blacklists":[22],"heuristic-based":[24],"methods,":[25],"struggle":[26],"keep":[28],"pace":[29],"with":[30],"sophisticated":[31],"phishing":[32,68,80,123,181],"attacks":[33],"that":[34,174],"continuously":[35],"adapt":[36],"evade":[38],"detection.":[39],"In":[40],"response,":[41],"machine":[42],"learning":[43,47,87,151],"(ML)":[44],"deep":[46,86],"(DL)":[48],"have":[49],"emerged":[50],"effective":[52],"solutions,":[53],"utilizing":[54],"structured":[55],"data":[56],"URL":[59],"composition,":[60],"webpage":[61],"content,":[62],"domain":[64],"characteristics":[65],"enhance":[67],"accuracy.":[70],"This":[71],"paper":[72],"presents":[73],"broad":[75],"narrative":[76],"review":[77,169],"of":[78,146],"ML-driven":[79],"approaches,":[82],"covering":[83],"supervised":[84],"learning,":[85],"architectures,":[88],"large":[89],"language":[90],"models":[91],"(LLMs),":[92],"ensemble":[93],"models,":[94,155],"hybrid":[96,154],"frameworks.":[97],"It":[98],"also":[99],"reviews":[100],"feature":[101],"engineering":[102],"methods":[103],"publicly":[105],"available":[106],"datasets,":[107],"noting":[108],"common":[109],"limitations":[110],"in":[111,122,180],"representational":[112],"coverage,":[113],"class":[114],"balance,":[115],"reproducibility.":[117],"We":[118],"identify":[119],"key":[120],"challenges":[121,163],"detection,":[124],"including":[125,143],"adversarial":[126],"attacks,":[127],"dataset":[128],"biases,":[129],"real-time":[130],"adaptability":[131],"issues,":[132],"computational":[134],"limitations.":[135],"Finally,":[136],"we":[137],"outline":[138],"actionable":[139],"future":[140,178],"research":[141],"directions,":[142],"the":[144],"development":[145],"adaptive":[147],"systems,":[149],"continual":[150],"benchmarks,":[152],"LLM-based":[153],"cross-platform":[157],"intelligence":[158],"sharing.":[159],"By":[160],"addressing":[161],"these":[162],"promoting":[165],"ML-based":[166],"methodologies,":[167],"this":[168],"aims":[170],"provide":[172],"insights":[173],"will":[175],"lead":[176],"innovations":[179],"approaches.":[183]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-06-13T07:54:00.901334","created_date":"2025-10-10T00:00:00"}