{"id":"https://openalex.org/W7146954978","doi":"https://doi.org/10.48550/arxiv.2603.27326","title":"Context-Aware Phishing Email Detection Using Machine Learning and NLP","display_name":"Context-Aware Phishing Email Detection Using Machine Learning and NLP","publication_year":2026,"publication_date":"2026-03-28","ids":{"openalex":"https://openalex.org/W7146954978","doi":"https://doi.org/10.48550/arxiv.2603.27326"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.27326","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.27326","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.27326","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5112960728","display_name":"Amitabh Chakravorty","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chakravorty, Amitabh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036140974","display_name":"Matthew Price","orcid":"https://orcid.org/0000-0001-5637-9230"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Price, Matthew","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5132603334","display_name":"Nelly Elsayed","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Elsayed, Nelly","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5026211837","display_name":"Zag ElSayed","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"ElSayed, Zag","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9825999736785889,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9825999736785889,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12607","display_name":"Personal Information Management and User Behavior","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.8460999727249146},{"id":"https://openalex.org/keywords/naive-bayes-classifier","display_name":"Naive Bayes classifier","score":0.8039000034332275},{"id":"https://openalex.org/keywords/preprocessor","display_name":"Preprocessor","score":0.5497999787330627},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.5257999897003174},{"id":"https://openalex.org/keywords/logistic-regression","display_name":"Logistic regression","score":0.4618000090122223},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.4410000145435333},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4235999882221222},{"id":"https://openalex.org/keywords/statistical-classification","display_name":"Statistical classification","score":0.3977999985218048}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.8460999727249146},{"id":"https://openalex.org/C52001869","wikidata":"https://www.wikidata.org/wiki/Q812530","display_name":"Naive Bayes classifier","level":3,"score":0.8039000034332275},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8026999831199646},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7609000205993652},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6358000040054321},{"id":"https://openalex.org/C34736171","wikidata":"https://www.wikidata.org/wiki/Q918333","display_name":"Preprocessor","level":2,"score":0.5497999787330627},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.5257999897003174},{"id":"https://openalex.org/C151956035","wikidata":"https://www.wikidata.org/wiki/Q1132755","display_name":"Logistic regression","level":2,"score":0.4618000090122223},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.4410000145435333},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4235999882221222},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.3977999985218048},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.38999998569488525},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.38850000500679016},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.3734999895095825},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.36739999055862427},{"id":"https://openalex.org/C195807954","wikidata":"https://www.wikidata.org/wiki/Q1662562","display_name":"Information extraction","level":2,"score":0.35339999198913574},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.34470000863075256},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.34119999408721924},{"id":"https://openalex.org/C10551718","wikidata":"https://www.wikidata.org/wiki/Q5227332","display_name":"Data pre-processing","level":2,"score":0.296999990940094},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.28700000047683716},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.28369998931884766},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27059999108314514},{"id":"https://openalex.org/C188338183","wikidata":"https://www.wikidata.org/wiki/Q80735","display_name":"Stop words","level":3,"score":0.25850000977516174},{"id":"https://openalex.org/C2983355114","wikidata":"https://www.wikidata.org/wiki/Q161380","display_name":"Credit card","level":3,"score":0.2549999952316284}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.27326","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.27326","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.27326","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.27326","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Phishing":[0],"attacks":[1],"remain":[2],"among":[3],"the":[4,57],"most":[5],"prevalent":[6],"cybersecurity":[7],"threats,":[8],"causing":[9],"significant":[10],"financial":[11],"losses":[12],"for":[13],"individuals":[14],"and":[15,68,92,105],"organizations":[16],"worldwide.":[17],"This":[18],"paper":[19],"presents":[20],"a":[21,73,133,137],"machine":[22],"learning-based":[23],"phishing":[24,142],"email":[25,30,59],"detection":[26],"system":[27,49,129],"that":[28,42,110],"analyzes":[29],"body":[31],"content":[32],"using":[33],"natural":[34],"language":[35],"processing":[36],"(NLP)":[37],"techniques.":[38],"Unlike":[39],"existing":[40],"approaches":[41],"primarily":[43],"focus":[44],"on":[45,72],"URL":[46],"analysis,":[47],"our":[48],"classifies":[50],"emails":[51,79],"by":[52,95,124],"extracting":[53],"contextual":[54],"features":[55],"from":[56,80],"entire":[58],"content.":[60],"We":[61],"evaluated":[62],"two":[63],"classification":[64,143],"models,":[65],"Naive":[66,122],"Bayes":[67,123],"Logistic":[69,111],"Regression,":[70],"trained":[71],"combined":[74],"corpus":[75],"of":[76,119,148],"53,973":[77],"labeled":[78],"three":[81],"distinct":[82],"datasets.":[83],"Our":[84],"preprocessing":[85],"pipeline":[86],"incorporates":[87],"lowercasing,":[88],"tokenization,":[89],"stop-word":[90],"removal,":[91],"lemmatization,":[93],"followed":[94],"Term":[96],"Frequency-Inverse":[97],"Document":[98],"Frequency":[99],"(TF-IDF)":[100],"feature":[101],"extraction":[102],"with":[103,116,136,144],"unigrams":[104],"bigrams.":[106],"Experimental":[107],"results":[108],"demonstrate":[109],"Regression":[112],"achieves":[113],"95.41%":[114],"accuracy":[115],"an":[117],"F1-score":[118],"94.33%,":[120],"outperforming":[121],"1.55":[125],"percentage":[126],"points.":[127],"The":[128],"was":[130],"deployed":[131],"as":[132],"web":[134],"application":[135],"FastAPI":[138],"backend,":[139],"providing":[140],"real-time":[141],"average":[145],"response":[146],"times":[147],"127ms.":[149]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-02T00:00:00"}