Phishing attacks remain a significant threat in the digital age, yet organizations lack effective methods to tackle phishing attacks without leaking sensitive information. Phish bowl initiatives are a vital part of cybersecurity efforts against these attacks. However, traditional phish bowls require manual anonymization and are often limited to internal use. To overcome these limitations, we introduce AdaPhish, an AI-powered phish bowl platform that automatically anonymizes and analyzes phishing emails using large language models (LLMs) and vector databases. AdaPhish achieves real-time detection and adaptation to new phishing tactics while enabling long-term tracking of phishing trends. Through automated reporting, adaptive analysis, and real-time alerts, AdaPhish presents a scalable, collaborative solution for phishing detection and cybersecurity education.
翻译:网络钓鱼攻击在数字时代仍构成重大威胁,然而各组织在避免敏感信息泄露的前提下缺乏应对此类攻击的有效方法。钓鱼邮件库(Phish bowl)计划是网络安全工作中对抗此类攻击的关键组成部分。但传统钓鱼邮件库需人工匿名化处理,且通常仅限于内部使用。为突破这些限制,我们提出了AdaPhish——一个基于人工智能的钓鱼邮件库平台,该平台利用大语言模型(LLMs)与向量数据库实现钓鱼邮件的自动匿名化与分析。AdaPhish能够实时检测并自适应新型钓鱼策略,同时支持对钓鱼攻击趋势的长期追踪。通过自动化报告生成、自适应分析与实时告警机制,AdaPhish为钓鱼检测与网络安全教育提供了可扩展的协同解决方案。