METHOD FOR FORMALIZING A MULTIDIMENSIONAL REFERENCE SUBENVIRONMENT FOR DETECTION OF PHISHING URLS

Abstract

In modern cyberspace, phishing attacks remain one of the most dangerous threats to information security, due to
their scalability, low cost of implementation and high effectiveness of impact on users. The use of phishing URLs as a
tool of sociotechnical influence necessitates the development of formalized approaches to their detection. The aim of the
work is to develop a method for formalizing a multidimensional reference subenvironment for detecting phishing URLs
based on the formalization of their characteristics within a multidimensional feature space. A set of parameters was used
to form the features, in particular Domain Age, Frequency of DNS Changes, Number of Subdomains, URL Length and
HTTPS/SSL. The proposed method is based on the interval representation of parameters, the use of linguistic variables
and membership functions, which allows taking into account the uncertainty and dynamics of the characteristics of
phishing resources. The formalization of the reference subenvironment is carried out through the integration of the
specified parameters. The results of the study demonstrate that the proposed approach provides a transition from empirical
feature analysis to formalized modeling of a multidimensional reference space suitable for detecting phishing URLs. This
creates a basis for increasing the accuracy of cyberthreat detection. The results obtained can be used to improve intrusion
detection systems and information protection tools aimed at countering sociotechnical attacks in modern cyberspace.
Keywords: phishing, phishing detection, URLs, cyberattacks, cyberthreats, information security, intrusion
detection systems, cyberattack detection systems.

References
1. Safi, A., & Singh, S. (2023). A systematic literature review on phishing website detection techniques. Journal
of King Saud University – Computer and Information Sciences, 35, 590–611.
2. Zuraiq, A. A., & Alkasassbeh, M. (2019). Review: Phishing detection approaches. In 2nd International
Conference on New Trends in Computing Sciences (pp. 1–6). https://doi.org/10.1109/ICTCS.2019.8923069.
3. Yang, L., Zhang, J., Wang, X., Li, Z., Li, Z., & He, Y. (2021). An improved ELM-based and data preprocessing
integrated approach for phishing detection considering comprehensive features. Expert Systems with Applications, 165,
113863. https://doi.org/10.1016/j.eswa.2020.113863.
4. Jain, S., & Gupta, A. (2018). Phishing detection: Analysis of visual similarity approaches. Expert Systems with
Applications.
5. Sindhu, S., Patil, S. P., Sreevalsan, A., Rahman, F., & Saritha, A. N. (2020). Phishing detection using random
forest, SVM and neural network with backpropagation. In ICSTCEE (pp. 391–394).
https://doi.org/10.1109/ICSTCEE49637.2020.9277256.
6. Zhu, E., Ju, Y., Chen, Z., Liu, F., & Fang, X. (2020). DTOF-ANN: An artificial neural network phishing
detection model based on decision tree and optimal features. Applied Soft Computing, 95, 106505.
https://doi.org/10.1016/j.asoc.2020.106505.
7. Alkawaz, M. H., Steven, S. J., Hajamydeen, A. I., & Ramli, R. (2021). A comprehensive survey on identification
and analysis of phishing website based on machine learning methods. In IEEE ISCAIE (pp. 82–87).
https://doi.org/10.1109/ISCAIE51753.2021.9431794.
8. Basit, A., Zafar, M., Liu, X., Javed, A. R., Jalil, Z., & Kifayat, K. (2020). A comprehensive survey of AI-enabled
phishing attacks detection techniques. Telecommunication Systems, 76(1), 139–154. https://doi.org/10.1007/s11235-020-
00733-2.
9. Korchenko, O., Korchenko, A., Zybin, S., & Davydenko, K. (2025). An approach for classifying socio-technical
attacks. Radioelectronic and Computer Systems, 2025(2), 230–252. https://doi.org/10.32620/reks.2025.2.15.
10. Karim, A., Shahroz, M., Mustofa, K., Belhaouari, S. B., & Joga, S. R. K. (2023). Phishing detection system
through hybrid machine learning based on URL. IEEE Access, 11, 36805–36822.
11. Shahrivari, V., Darabi, M. M., & Izadi, M. (2020). Phishing detection using machine learning techniques.
arXiv:2009.11116. http://arxiv.org/abs/2009.11116.
12. Li, Y., Yang, Z., Chen, X., Yuan, H., & Liu, W. (2019). A stacking model using URL and HTML features for
phishing webpage detection. Future Generation Computer Systems, 94, 27–39.
https://doi.org/10.1016/j.future.2018.11.004.
13. Sahingoz, O. K., Buber, E., Demir, O., & Diri, B. (2019). Machine learning based phishing detection from
URLs. Expert Systems with Applications, 117, 345–357.
14. Marchal, S., Saari, K., Singh, N., & Asokan, N. (2016). Know your phish: Novel techniques for detecting
phishing sites and their targets. In IEEE CNS Conference.
15. Adebowale, M. A., Lwin, K. T., & Hossain, M. A. (2023). Intelligent phishing detection scheme using deep
learning algorithms. Journal of Enterprise Information Management, 36, 747–766.
16. Kocyigit, E., Korkmaz, M., Sahingoz, O. K., & Diri, B. (2024). Enhanced feature selection using genetic
algorithm for machine-learning-based phishing URL detection. Applied Sciences, 14(14), 6081.
https://doi.org/10.3390/app14146081.
17. Suleman, M. T., & Awan, S. M. (2019). Optimization of URL-based phishing websites detection through
genetic algorithms. Automation Control Computer Sciences, 53, 333–341.
18. Optimized URL feature selection based on genetic-algorithm-embedded deep learning for phishing website
detection. (2022). Electronics, 11(7), 1090. https://doi.org/10.3390/electronics11071090.
19. Naïve Bayes classifier with genetic algorithm for phishing website detection. (2024). Conference proceedings,
96–108.
20. Opara, C., Chen, Y., & Wei, B. (2024). Look before you leap: Detecting phishing web pages by exploiting raw
URL and HTML characteristics. Expert Systems with Applications, 236, 121183.
21. Modha, N., & Virani, S. (2016). Fuzzy logic for phishing website detection. International Journal of Computer
Science and Information Technologies, 7(5), 2221–2223.
22. Almseidin, M., Alkasassbeh, M., Alzubi, M., & Al-Sawwa, J. (2022). Cyber-phishing website detection using
fuzzy rule interpolation. Cryptography, 6(2), 24. https://doi.org/10.3390/cryptography6020024.
23. Montazer, G. A., & ArabYarmohammadi, S. (2015). Detection of phishing attacks in Iranian e-banking using
a fuzzy–rough hybrid system. Applied Soft Computing, 35, 482–492. https://doi.org/10.1016/j.asoc.2015.06.052.
24. Zabihimayvan, M., & Doran, D. (2019). Fuzzy rough set feature selection to enhance phishing attack detection.
In IEEE FUZZ-IEEE (pp. 1–6). https://doi.org/10.1109/FUZZ-IEEE.2019.8858882.
25. Hidayat, R., Yanto, I. T. R., Ramli, A. A., & Fudzee, M. F. M. (2021). Similarity measure fuzzy soft set for
phishing detection. International Journal of Advanced Intelligent Informatics, 7(1), 101–111.
https://doi.org/10.26555/ijain.v7i1.605.
26. Bu, S. J., & Cho, S. B. (2025). A transformer network calibrated with fuzzy logic for phishing URL detection.
Fuzzy Sets and Systems, 499, 109474. https://doi.org/10.1016/j.fss.2025.109474.
27. Корченко А. Метод формування еталонного субдовкілля для виявлення фішингових URL-адрес / А.
Корченко, Є. Іванченко, Ф. Сатибалдієва, Н. Жумангалієва, К. Давиденко // Захист інформації. 2023. №2. Т.25. С.
82-95.
28. Анна Корченко, Методи ідентифікації аномальних станів для систем виявлення вторгнень.
Монографія, Київ, ЦП «Компринт», 2019 361 с.