{"id":"https://openalex.org/W7161689586","doi":"https://doi.org/10.48550/arxiv.2605.17891","title":"Explainable Machine Learning for Phishing Detection on Heterogeneous Datasets with MCP-Enabled Deployment","display_name":"Explainable Machine Learning for Phishing Detection on Heterogeneous Datasets with MCP-Enabled Deployment","publication_year":2026,"publication_date":"2026-05-18","ids":{"openalex":"https://openalex.org/W7161689586","doi":"https://doi.org/10.48550/arxiv.2605.17891"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.17891","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17891","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.17891","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130687776","display_name":"Nikhil Kumar Dora","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dora, Nikhil Kumar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013858251","display_name":"Sumit Kumar Tetarave","orcid":"https://orcid.org/0000-0002-6937-3564"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tetarave, Sumit Kumar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037031829","display_name":"Rishikesh Sahay","orcid":"https://orcid.org/0000-0002-0380-8289"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sahay, Rishikesh","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136455196","display_name":"Madhusudan Singh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Singh, Madhusudan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5136464868","display_name":"Xiaoqing Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Xiaoqing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9646000266075134,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9646000266075134,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.011500000022351742,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.002199999988079071,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.8809000253677368},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.45089998841285706},{"id":"https://openalex.org/keywords/confidentiality","display_name":"Confidentiality","score":0.4381999969482422},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.43389999866485596},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.41260001063346863},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature engineering","score":0.4101000130176544},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3921999931335449},{"id":"https://openalex.org/keywords/credit-card","display_name":"Credit card","score":0.37689998745918274}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.8809000253677368},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.754800021648407},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.7426999807357788},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6930999755859375},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.45089998841285706},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.4381999969482422},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.43389999866485596},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.41260001063346863},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.4101000130176544},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3921999931335449},{"id":"https://openalex.org/C2983355114","wikidata":"https://www.wikidata.org/wiki/Q161380","display_name":"Credit card","level":3,"score":0.37689998745918274},{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.3569999933242798},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.35600000619888306},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33570000529289246},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3192000091075897},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.30809998512268066},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.288100004196167},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C151956035","wikidata":"https://www.wikidata.org/wiki/Q1132755","display_name":"Logistic regression","level":2,"score":0.2818000018596649},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.2619999945163727},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.257999986410141}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.17891","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17891","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.17891","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.17891","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.4307502210140228,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"With":[0],"the":[1,9,22,25,61,73,132,174,189,209],"growth":[2],"in":[3,80],"digital":[4],"transformation":[5],"and":[6,24,43,66,102,104,124,162,203],"Internet":[7],"usage,":[8],"Social":[10],"Engineering":[11],"techniques":[12,31,115],"such":[13,99,116],"as":[14,100,117],"Phishing":[15,27],"have":[16],"become":[17],"a":[18,89],"major":[19],"concern":[20],"for":[21,63],"users":[23,34],"organizations.":[26,47],"attacks":[28],"involve":[29],"deceptive":[30],"to":[32,46,49,130],"trick":[33],"into":[35],"revealing":[36],"confidential":[37],"information":[38],"that":[39,87,153,170],"causes":[40],"financial":[41],"loss":[42],"reputation":[44],"damage":[45],"According":[48],"report":[50],"of":[51,54,75,201],"Verizon,":[52],"36%":[53],"all":[55],"data":[56],"breaches":[57],"involved":[58],"phishing,":[59],"highlighting":[60],"need":[62],"intelligent,":[64],"adaptive,":[65],"explainable":[67,112],"security":[68,164],"mechanisms.":[69],"This":[70],"paper":[71],"examines":[72],"efficiency":[74],"different":[76],"machine":[77],"learning":[78],"algorithms":[79],"phishing":[81,85,149],"detection":[82,151],"on":[83],"heterogeneous":[84],"datasets":[86,96],"include":[88],"publicly":[90],"available":[91],"UCI":[92],"dataset,":[93],"our":[94],"generated":[95,106],"using":[97],"tools":[98],"EvilGinx":[101],"Zphisher,":[103],"AI":[105,113],"datasets.":[107],"Moreover,":[108],"this":[109,143],"work":[110,144],"incorporates":[111,146],"(XAI)":[114],"Information":[118],"Gain,":[119],"SHAP":[120],"(SHapley":[121],"Additive":[122],"Explanations),":[123],"LIME":[125],"(Local":[126],"Interpretable":[127],"Model-Agnostic":[128],"Explanations)":[129],"examine":[131],"most":[133],"influential":[134],"features":[135],"impacting":[136],"classification":[137],"outcomes.":[138],"To":[139],"support":[140],"practical":[141],"deployment,":[142],"also":[145],"an":[147,199],"MCP-based":[148],"URL":[150,156],"system":[152],"offers":[154],"real-time":[155],"analysis,":[157],"feature":[158],"extraction,":[159],"confidence-based":[160],"classification,":[161],"AI-assisted":[163],"interpretation.":[165],"The":[166],"experimental":[167],"results":[168],"demonstrate":[169],"among":[171,184,194,204],"classical":[172],"models":[173,186],"highest":[175,190,210],"accuracy":[176,191,200,211],"is":[177],"obtained":[178],"by":[179],"Logistic":[180],"Regression":[181],"at":[182,192,212],"92.44%,":[183],"ensemble":[185],"CatBoost":[187],"achieved":[188,198],"95.01%,":[193],"neural":[195],"network":[196],"CNN":[197],"94.02%,":[202],"transformer-based":[205],"models,":[206],"DistilBERT":[207],"got":[208],"99.78%":[213]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}