{"id":"https://openalex.org/W7170068084","doi":"https://doi.org/10.48550/arxiv.2607.18429","title":"Adversarial Robustness of Phishing Email Detection: A Comparative Study of TF-IDF + Logistic Regression and Fine-Tuned DistilBERT","display_name":"Adversarial Robustness of Phishing Email Detection: A Comparative Study of TF-IDF + Logistic Regression and Fine-Tuned DistilBERT","publication_year":2026,"publication_date":"2026-07-20","ids":{"openalex":"https://openalex.org/W7170068084","doi":"https://doi.org/10.48550/arxiv.2607.18429"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.18429","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.18429","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.18429","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5143453481","display_name":"Tanveer Ahmed","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ahmed, Tanveer","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5143450756","display_name":"Seyedali Pourmoafil","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pourmoafil, Seyedali","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9706000089645386,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9706000089645386,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.008299999870359898,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.0026000000070780516,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9049000144004822},{"id":"https://openalex.org/keywords/pairwise-comparison","display_name":"Pairwise comparison","score":0.708299994468689},{"id":"https://openalex.org/keywords/logistic-regression","display_name":"Logistic regression","score":0.6389999985694885},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.6072999835014343},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5764999985694885},{"id":"https://openalex.org/keywords/test-data","display_name":"Test data","score":0.3677000105381012},{"id":"https://openalex.org/keywords/statistical-hypothesis-testing","display_name":"Statistical hypothesis testing","score":0.36160001158714294},{"id":"https://openalex.org/keywords/test","display_name":"Test (biology)","score":0.3111000061035156}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9049000144004822},{"id":"https://openalex.org/C184898388","wikidata":"https://www.wikidata.org/wiki/Q1435712","display_name":"Pairwise comparison","level":2,"score":0.708299994468689},{"id":"https://openalex.org/C151956035","wikidata":"https://www.wikidata.org/wiki/Q1132755","display_name":"Logistic regression","level":2,"score":0.6389999985694885},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.6072999835014343},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6010000109672546},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5764999985694885},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5289999842643738},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4449000060558319},{"id":"https://openalex.org/C16910744","wikidata":"https://www.wikidata.org/wiki/Q7705759","display_name":"Test data","level":2,"score":0.3677000105381012},{"id":"https://openalex.org/C87007009","wikidata":"https://www.wikidata.org/wiki/Q210832","display_name":"Statistical hypothesis testing","level":2,"score":0.36160001158714294},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3589000105857849},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.3111000061035156},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.30720001459121704},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2987000048160553},{"id":"https://openalex.org/C83546350","wikidata":"https://www.wikidata.org/wiki/Q1139051","display_name":"Regression","level":2,"score":0.29510000348091125},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.2896000146865845},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2833000123500824},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.28060001134872437},{"id":"https://openalex.org/C58625266","wikidata":"https://www.wikidata.org/wiki/Q1256418","display_name":"Lode","level":2,"score":0.2784000039100647},{"id":"https://openalex.org/C2986587452","wikidata":"https://www.wikidata.org/wiki/Q938438","display_name":"Statistical analysis","level":2,"score":0.2752000093460083},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.26899999380111694},{"id":"https://openalex.org/C152877465","wikidata":"https://www.wikidata.org/wiki/Q208042","display_name":"Regression analysis","level":2,"score":0.2623000144958496},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2540000081062317},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.2513999938964844},{"id":"https://openalex.org/C109167261","wikidata":"https://www.wikidata.org/wiki/Q5421955","display_name":"Fell","level":2,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.18429","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.18429","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.18429","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.18429","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Phishing":[0],"emails":[1,34,69],"remain":[2],"one":[3],"of":[4,47,67,120,162,171,206],"the":[5,131,142,157],"most":[6],"persistent":[7],"cybersecurity":[8],"threats,":[9],"and":[10,57,75,84,110,138,175,197],"machine-learning":[11],"classifiers":[12],"are":[13,24],"widely":[14],"used":[15],"to":[16,37,105,113,126],"detect":[17],"them.":[18],"Most":[19],"reported":[20],"detection":[21],"accuracies,":[22],"however,":[23],"measured":[25],"on":[26,33,63,92,146,160],"clean,":[27],"in-distribution":[28],"test":[29,134],"data":[30,94],"rather":[31,181],"than":[32,182],"deliberately":[35],"altered":[36],"evade":[38],"detection.":[39],"This":[40],"paper":[41],"reports":[42],"a":[43,51,58,64,118,127,168,203],"controlled,":[44],"pairwise":[45],"comparison":[46],"two":[48,143],"phishing-detection":[49,207],"approaches":[50],"TF-IDF":[52,101],"+":[53,102],"Logistic":[54],"Regression":[55],"baseline":[56],"fine-tuned":[59],"DistilBERT":[60,111],"transformer":[61],"trained":[62],"unified":[65],"corpus":[66],"82,255":[68],"drawn":[70],"from":[71],"six":[72],"public":[73],"datasets":[74],"evaluated":[76],"under":[77,98],"three":[78],"conditions:":[79],"normal":[80],"in-distribution,":[81],"synthetic":[82],"phishing,":[83],"adversarial":[85,99,133,163,195,199],"phishing.":[86],"Both":[87],"models":[88,144,158],"exceeded":[89],"98%":[90],"accuracy":[91,191],"clean":[93],"yet":[95,149],"degraded":[96],"sharply":[97],"testing:":[100],"LR":[103],"fell":[104,112],"64.00%":[106],"(a":[107,115],"34.59-percentage-point":[108],"drop)":[109,117],"63.64%":[114],"35.40-percentage-point":[116],"gap":[119],"only":[121],"0.36":[122],"percentage":[123],"points,":[124],"equivalent":[125],"single":[128],"email":[129],"in":[130],"275-sample":[132],"set.":[135],"LIME,":[136],"SHAP,":[137],"attention-rollout":[139],"analysis":[140,155],"indicate":[141],"relied":[145],"different":[147],"evidence":[148],"showed":[150],"similar":[151,169],"vulnerability.":[152],"Pairwise":[153],"error":[154],"shows":[156],"agreed":[159],"54.9%":[161],"samples":[164],"but":[165],"each":[166],"made":[167],"number":[170],"exclusive":[172],"errors":[173],"(24":[174],"25":[176],"respectively),":[177],"indicating":[178],"partly":[179],"complementary":[180],"identical":[183],"failure":[184],"modes.":[185],"The":[186],"results":[187],"show":[188],"that":[189,198],"clean-data":[190],"does":[192],"not":[193],"predict":[194],"robustness,":[196],"testing":[200],"should":[201],"be":[202],"standard":[204],"part":[205],"evaluation.":[208]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-23T00:00:00"}
