{"id":"https://openalex.org/W1956666414","doi":"https://doi.org/10.3233/jcs-2010-0371","title":"New filtering approaches for phishing email","display_name":"New filtering approaches for phishing email","publication_year":2010,"publication_date":"2010-01-01","ids":{"openalex":"https://openalex.org/W1956666414","doi":"https://doi.org/10.3233/jcs-2010-0371","mag":"1956666414"},"language":"en","primary_location":{"id":"doi:10.3233/jcs-2010-0371","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-2010-0371","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047771562","display_name":"Andr\u00e9 Bergholz","orcid":null},"institutions":[{"id":"https://openalex.org/I4210144576","display_name":"Fraunhofer Institute for Intelligent Analysis and Information Systems","ror":"https://ror.org/04nc32781","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210144576","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Andr\u00e9 Bergholz","raw_affiliation_strings":["Fraunhofer IAIS, Schlo\u00df Birlinghoven, 53754 St. Augustin, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer IAIS, Schlo\u00df Birlinghoven, 53754 St. Augustin, Germany","institution_ids":["https://openalex.org/I4210144576"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029692765","display_name":"Jan De Beer","orcid":null},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Jan De Beer","raw_affiliation_strings":["Department of Computer Science, Katholieke Universiteit Leuven, Celestijnenlaan 200A, 3001 Heverlee, Belgium","E-mail:","Fax: +49 2241 14 43021"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Katholieke Universiteit Leuven, Celestijnenlaan 200A, 3001 Heverlee, Belgium","institution_ids":["https://openalex.org/I99464096"]},{"raw_affiliation_string":"E-mail:","institution_ids":[]},{"raw_affiliation_string":"Fax: +49 2241 14 43021","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039473426","display_name":"Sebastian Glahn","orcid":null},"institutions":[{"id":"https://openalex.org/I4210144576","display_name":"Fraunhofer Institute for Intelligent Analysis and Information Systems","ror":"https://ror.org/04nc32781","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210144576","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sebastian Glahn","raw_affiliation_strings":["Fraunhofer IAIS, Schlo\u00df Birlinghoven, 53754 St. Augustin, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer IAIS, Schlo\u00df Birlinghoven, 53754 St. Augustin, Germany","institution_ids":["https://openalex.org/I4210144576"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075796989","display_name":"Marie\u2010Francine Moens","orcid":"https://orcid.org/0000-0002-3732-9323"},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Marie-Francine Moens","raw_affiliation_strings":["Department of Computer Science, Katholieke Universiteit Leuven, Celestijnenlaan 200A, 3001 Heverlee, Belgium","E-mail:","Fax: +49 2241 14 43021"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Katholieke Universiteit Leuven, Celestijnenlaan 200A, 3001 Heverlee, Belgium","institution_ids":["https://openalex.org/I99464096"]},{"raw_affiliation_string":"E-mail:","institution_ids":[]},{"raw_affiliation_string":"Fax: +49 2241 14 43021","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025445408","display_name":"Gerhard Paa\u00df","orcid":null},"institutions":[{"id":"https://openalex.org/I4210144576","display_name":"Fraunhofer Institute for Intelligent Analysis and Information Systems","ror":"https://ror.org/04nc32781","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210144576","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Gerhard Paa\u00df","raw_affiliation_strings":["Fraunhofer IAIS, Schlo\u00df Birlinghoven, 53754 St. Augustin, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer IAIS, Schlo\u00df Birlinghoven, 53754 St. Augustin, Germany","institution_ids":["https://openalex.org/I4210144576"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019115891","display_name":"Siehyun Strobel","orcid":null},"institutions":[{"id":"https://openalex.org/I4210144576","display_name":"Fraunhofer Institute for Intelligent Analysis and Information Systems","ror":"https://ror.org/04nc32781","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4210144576","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Siehyun Strobel","raw_affiliation_strings":["Fraunhofer IAIS, Schlo\u00df Birlinghoven, 53754 St. Augustin, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fraunhofer IAIS, Schlo\u00df Birlinghoven, 53754 St. Augustin, Germany","institution_ids":["https://openalex.org/I4210144576"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5047771562"],"corresponding_institution_ids":["https://openalex.org/I4210144576"],"apc_list":null,"apc_paid":null,"fwci":20.6958,"has_fulltext":false,"cited_by_count":169,"citation_normalized_percentile":{"value":0.99137695,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"18","issue":"1","first_page":"7","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11550","display_name":"Text and Document Classification Technologies","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.968319296836853},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7830612659454346},{"id":"https://openalex.org/keywords/blacklisting","display_name":"Blacklisting","score":0.5228186845779419},{"id":"https://openalex.org/keywords/password","display_name":"Password","score":0.5201702117919922},{"id":"https://openalex.org/keywords/steganalysis","display_name":"Steganalysis","score":0.48814448714256287},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.45089319348335266},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4149951636791229},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.41252970695495605},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.28628361225128174},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.26366716623306274},{"id":"https://openalex.org/keywords/steganography","display_name":"Steganography","score":0.18927216529846191}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.968319296836853},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7830612659454346},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.5228186845779419},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.5201702117919922},{"id":"https://openalex.org/C107368093","wikidata":"https://www.wikidata.org/wiki/Q448176","display_name":"Steganalysis","level":4,"score":0.48814448714256287},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.45089319348335266},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4149951636791229},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.41252970695495605},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.28628361225128174},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.26366716623306274},{"id":"https://openalex.org/C108801101","wikidata":"https://www.wikidata.org/wiki/Q15032","display_name":"Steganography","level":3,"score":0.18927216529846191},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3233/jcs-2010-0371","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jcs-2010-0371","pdf_url":null,"source":{"id":"https://openalex.org/S106992369","display_name":"Journal of Computer Security","issn_l":"0926-227X","issn":["0926-227X","1875-8924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Computer Security","raw_type":"journal-article"},{"id":"pmh:oai:fraunhofer.de:N-113622","is_oa":false,"landing_page_url":"http://publica.fraunhofer.de/documents/N-113622.html","pdf_url":null,"source":{"id":"https://openalex.org/S4306400801","display_name":"Publikationsdatenbank der Fraunhofer-Gesellschaft (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fraunhofer IAIS","raw_type":"Journal Article"},{"id":"pmh:oai:lirias2repo.kuleuven.be:123456789/211008","is_oa":false,"landing_page_url":"https://lirias.kuleuven.be/bitstream/123456789/211008/1/BergholzCompSec2009.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306401954","display_name":"Lirias (KU Leuven)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I99464096","host_organization_name":"KU Leuven","host_organization_lineage":["https://openalex.org/I99464096"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of computer security, vol. 18 (1), Art.No. 1, (7-35)","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:publica.fraunhofer.de:publica/221166","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/221166","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"journal article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W50596167","https://openalex.org/W83087001","https://openalex.org/W99136341","https://openalex.org/W190008395","https://openalex.org/W1575869149","https://openalex.org/W1595555330","https://openalex.org/W1880262756","https://openalex.org/W1953638699","https://openalex.org/W1972969203","https://openalex.org/W1992419399","https://openalex.org/W1993202648","https://openalex.org/W2002964284","https://openalex.org/W2017337590","https://openalex.org/W2040717637","https://openalex.org/W2080850829","https://openalex.org/W2085262576","https://openalex.org/W2104290684","https://openalex.org/W2108472922","https://openalex.org/W2118020653","https://openalex.org/W2118137541","https://openalex.org/W2131906261","https://openalex.org/W2134750673","https://openalex.org/W2137012911","https://openalex.org/W2139565456","https://openalex.org/W2142819948","https://openalex.org/W2153057630","https://openalex.org/W2156909104","https://openalex.org/W2164598857","https://openalex.org/W2478184821","https://openalex.org/W2481983299","https://openalex.org/W2489670389","https://openalex.org/W2503710325","https://openalex.org/W2911964244"],"related_works":["https://openalex.org/W4281884841","https://openalex.org/W2933056782","https://openalex.org/W2012481173","https://openalex.org/W2043034431","https://openalex.org/W1593211785","https://openalex.org/W3033830493","https://openalex.org/W3207470445","https://openalex.org/W3215769141","https://openalex.org/W2941092262","https://openalex.org/W4360994876"],"abstract_inverted_index":{"Phishing":[0,49],"emails":[1,35,147,248],"usually":[2],"contain":[3],"a":[4,7,12,16,19,27,59,69,134,143,178,243,292],"message":[5],"from":[6,40,78],"credible":[8],"looking":[9],"source":[10],"requesting":[11],"user":[13],"to":[14,18,25,46,62,74,86,114,161,165,187,302],"click":[15],"link":[17],"website":[20],"where":[21],"she/he":[22],"is":[23,58,137,224],"asked":[24],"enter":[26],"password":[28],"or":[29,43,102,153,228],"other":[30,261],"confidential":[31],"information.":[32,48],"Most":[33],"phishing":[34,107,189,266],"aim":[36],"at":[37],"withdrawing":[38],"money":[39],"financial":[41],"institutions":[42],"getting":[44],"access":[45],"private":[47],"has":[50],"increased":[51],"enormously":[52],"over":[53,84],"the":[54,93,125,131,167,196,210,225,235,270,276,283,295],"last":[55],"years":[56],"and":[57,65,111,127,207,253,300],"serious":[60],"threat":[61],"global":[63],"security":[64],"economy.":[66],"There":[67],"are":[68,97,109,122,184],"number":[70,119,179],"of":[71,120,130,146,169,180,199,204,212,230,247,272,279,285,305],"possible":[72],"countermeasures":[73],"phishing.":[75,154,306],"These":[76,191],"range":[77],"communication-oriented":[79],"approaches":[80,96,263],"like":[81],"authentication":[82],"protocols":[83],"blacklisting":[85],"content-based":[87,106],"filtering":[88],"approaches.":[89],"We":[90,268],"argue":[91],"that":[92,183],"first":[94],"two":[95],"currently":[98],"not":[99,232],"broadly":[100],"implemented":[101],"exhibit":[103],"deficits.":[104],"Therefore":[105],"filters":[108,296],"necessary":[110],"widely":[112],"used":[113],"increase":[115],"communication":[116],"security.":[117],"A":[118],"features":[121,141,182],"extracted":[123],"capturing":[124],"content":[126,231],"structural":[128],"properties":[129],"email.":[132],"Subsequently":[133],"statistical":[135,193],"classifier":[136,156],"trained":[138],"using":[139],"these":[140,273],"on":[142],"training":[144],"set":[145],"labeled":[148],"as":[149,215,217,250],"ham":[150,254],"(legitimate),":[151],"spam":[152],"This":[155],"may":[157,297],"then":[158],"be":[159,298],"applied":[160],"an":[162,286],"email":[163,200,205,287],"stream":[164],"estimate":[166],"classes":[168],"new":[170,303],"incoming":[171],"emails.":[172,190,267],"In":[173,256],"this":[174,280],"paper":[175],"we":[176,240,290],"describe":[177,291],"novel":[181],"particularly":[185],"well-suited":[186],"identify":[188],"include":[192],"models":[194],"for":[195,219,264,275],"low-dimensional":[197],"descriptions":[198],"topics,":[201],"sequential":[202],"analysis":[203],"text":[206],"external":[208],"links,":[209],"detection":[211],"embedded":[213],"logos":[214],"well":[216],"indicators":[218],"hidden":[220],"salting.":[221],"Hidden":[222],"salting":[223],"intentional":[226],"addition":[227],"distortion":[229],"perceivable":[233],"by":[234],"reader.":[236],"For":[237],"empirical":[238],"evaluation":[239],"have":[241],"obtained":[242],"large":[244],"realistic":[245],"corpus":[246],"prelabeled":[249],"spam,":[251],"phishing,":[252],"(legitimate).":[255],"experiments":[257],"our":[258],"methods":[259],"outperform":[260],"published":[262],"classifying":[265],"discuss":[269],"implications":[271],"results":[274],"practical":[277],"application":[278],"approach":[281],"in":[282],"workflow":[284],"provider.":[288],"Finally":[289],"strategy":[293],"how":[294],"updated":[299],"adapted":[301],"types":[304]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":13},{"year":2019,"cited_by_count":17},{"year":2018,"cited_by_count":10},{"year":2017,"cited_by_count":5},{"year":2016,"cited_by_count":10},{"year":2015,"cited_by_count":16},{"year":2014,"cited_by_count":9},{"year":2013,"cited_by_count":10},{"year":2012,"cited_by_count":7}],"updated_date":"2026-06-16T09:24:06.705377","created_date":"2025-10-10T00:00:00"}