{"id":"https://openalex.org/W4407865050","doi":"https://doi.org/10.1186/s42400-024-00309-6","title":"A combined feature selection approach for malicious email detection based on a comprehensive email dataset","display_name":"A combined feature selection approach for malicious email detection based on a comprehensive email dataset","publication_year":2025,"publication_date":"2025-02-24","ids":{"openalex":"https://openalex.org/W4407865050","doi":"https://doi.org/10.1186/s42400-024-00309-6"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-024-00309-6","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00309-6","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00309-6","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00309-6","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100399276","display_name":"Han Zhang","orcid":"https://orcid.org/0000-0002-0166-1973"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Han Zhang","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Dongchuan Road, Shanghai, 200240, China"],"affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Dongchuan Road, Shanghai, 200240, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050799902","display_name":"Yong Shi","orcid":"https://orcid.org/0009-0003-0055-8362"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yong Shi","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Dongchuan Road, Shanghai, 200240, China"],"affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Dongchuan Road, Shanghai, 200240, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101515497","display_name":"Ming Liu","orcid":"https://orcid.org/0000-0003-4548-2683"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ming Liu","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Dongchuan Road, Shanghai, 200240, China"],"affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Dongchuan Road, Shanghai, 200240, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100621400","display_name":"Libo Chen","orcid":"https://orcid.org/0000-0003-3236-4805"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Libo Chen","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Dongchuan Road, Shanghai, 200240, China"],"affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Dongchuan Road, Shanghai, 200240, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085851878","display_name":"Songyang Wu","orcid":"https://orcid.org/0000-0002-9623-8894"},"institutions":[{"id":"https://openalex.org/I1302611135","display_name":"Ministry of Public Security of the People's Republic of China","ror":"https://ror.org/00bt9we26","country_code":"CN","type":"government","lineage":["https://openalex.org/I1302611135"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Songyang Wu","raw_affiliation_strings":["The Third Research Institute of Ministry of Public Security, Yueyang Road, Shanghai, 200031, China"],"affiliations":[{"raw_affiliation_string":"The Third Research Institute of Ministry of Public Security, Yueyang Road, Shanghai, 200031, China","institution_ids":["https://openalex.org/I1302611135"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062829885","display_name":"Zhi Xue","orcid":"https://orcid.org/0000-0003-2875-304X"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhi Xue","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Dongchuan Road, Shanghai, 200240, China"],"affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University, Dongchuan Road, Shanghai, 200240, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5100399276"],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":24.1105,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.99239367,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"8","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.7518476247787476},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6872297525405884},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.6476119756698608},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5292954444885254},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.49182653427124023},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.23381757736206055}],"concepts":[{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.7518476247787476},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6872297525405884},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.6476119756698608},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5292954444885254},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.49182653427124023},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.23381757736206055},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-024-00309-6","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00309-6","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00309-6","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:ad19bf8c6aa945889f3420dd39b3ae90","is_oa":true,"landing_page_url":"https://doaj.org/article/ad19bf8c6aa945889f3420dd39b3ae90","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 8, Iss 1, Pp 1-22 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-024-00309-6","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00309-6","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00309-6","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8630035389","display_name":null,"funder_award_id":"31020","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4407865050.pdf"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W1930624869","https://openalex.org/W2071254787","https://openalex.org/W2122111042","https://openalex.org/W2220632610","https://openalex.org/W2240246332","https://openalex.org/W2290364176","https://openalex.org/W2291531368","https://openalex.org/W2295598076","https://openalex.org/W2498119267","https://openalex.org/W2551827541","https://openalex.org/W2596855402","https://openalex.org/W2805346584","https://openalex.org/W2900822988","https://openalex.org/W2911273633","https://openalex.org/W2944103016","https://openalex.org/W3007621123","https://openalex.org/W3011999700","https://openalex.org/W3039807308","https://openalex.org/W3170566557","https://openalex.org/W3184796286","https://openalex.org/W3193944778","https://openalex.org/W3206219122","https://openalex.org/W4210467114","https://openalex.org/W4213145421","https://openalex.org/W4236137412","https://openalex.org/W4301489482","https://openalex.org/W4302441632","https://openalex.org/W4307647482","https://openalex.org/W4391698872","https://openalex.org/W4400034390"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W4386564352","https://openalex.org/W2952668426"],"abstract_inverted_index":{"Abstract":[0],"In":[1,51,144],"recent":[2],"years,":[3],"new":[4,60,96,228],"malicious":[5,20,31,63,97,120,136,153,218],"email":[6,21,32,64,94,121,137,141,209,219,255],"attacks":[7,138],"have":[8],"emerged.":[9],"We":[10,242],"summarize":[11],"two":[12,180],"major":[13],"challenges":[14],"in":[15,70],"the":[16,86,109,132,147,150,156,165,186,192,198,249,262],"current":[17],"field":[18],"of":[19,62,88,135,149,152,158,182,197,254,286,293],"detection":[22,33,49,87,220,273,280],"using":[23,202],"machine":[24,269],"learning":[25,270],"algorithms.":[26],"(1)":[27],"Current":[28],"works":[29],"on":[30,77,185,217,261],"use":[34],"different":[35],"datasets":[36],"and":[37,41,73,95,130,155,195,205,231,239,251,266,276,288],"lack":[38],"a":[39,173,203,227,289],"unified":[40],"comprehensive":[42,206],"open":[43,168,207],"source":[44,169,208],"dataset":[45,125,175,187],"standard":[46],"for":[47,272],"evaluating":[48],"performance.":[50,223],"addition,":[52],"outdated":[53],"data":[54],"makes":[55],"it":[56],"difficult":[57],"to":[58,213],"detect":[59],"types":[61,134,151],"attacks.":[65],"(2)":[66],"There":[67],"are":[68,160],"limitations":[69],"feature":[71,229,259],"selection":[72,230],"extraction.":[74],"Relying":[75],"only":[76],"static":[78,237,245],"features":[79,83,238,246],"or":[80,92],"body":[81,252,264],"textual":[82,240,258],"cannot":[84],"satisfy":[85],"both":[89,236,248],"common":[90],"phishing":[91],"spam":[93],"emails":[98,154],"that":[99,139,234],"exploit":[100,140],"protocol":[101,142],"vulnerabilities.":[102,143],"To":[103],"address":[104],"these":[105],"problems,":[106],"we":[107,171,190,211,225],"propose":[108,226],"Exploiting":[110],"Protocol":[111],"Vulnerability":[112],"Malicious":[113],"Email":[114],"(EPVME)":[115],"dataset,":[116,146,210],"which":[117],"contains":[118],"49,136":[119],"samples.":[122,178],"The":[123],"EPVME":[124,199],"is":[126],"constructed":[127],"by":[128],"summarizing":[129],"simulating":[131],"novel":[133],"our":[145],"coverage":[148],"number":[157],"them":[159],"significantly":[161],"increased.":[162],"By":[163,201],"collecting":[164],"currently":[166],"available":[167],"datasets,":[170],"build":[172],"large-scale":[174],"with":[176],"660,985":[177],"Through":[179],"sets":[181],"comparative":[183,222],"experiments":[184],"containing":[188],"EPVME,":[189],"verify":[191],"necessity,":[193],"reliability,":[194],"validity":[196],"dataset.":[200],"large":[204],"hope":[212],"help":[214],"subsequent":[215],"work":[216],"achieve":[221,283],"Furthermore,":[224],"construction":[232,275],"method":[233],"combines":[235],"features.":[241],"extract":[243],"79":[244],"from":[247],"header":[250],"parts":[253],"samples,":[256],"perform":[257],"extraction":[260],"pre-processed":[263],"parts,":[265],"combine":[267],"various":[268],"algorithms":[271],"model":[274,281],"experimental":[277],"comparison.":[278],"Our":[279],"can":[282],"an":[284],"accuracy":[285],"99.968%":[287],"false":[290],"positive":[291],"rate":[292],"0.099%.":[294]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":6}],"updated_date":"2026-03-18T14:38:29.013473","created_date":"2025-10-10T00:00:00"}