With the growth in digital transformation and Internet usage, the Social Engineering techniques such as Phishing have become a major concern for the users and the organizations. Phishing attacks involve deceptive techniques to trick users into revealing confidential information that causes financial loss and reputation damage to organizations. According to report of Verizon, 36% of all data breaches involved phishing, highlighting the need for intelligent, adaptive, and explainable security mechanisms. This paper examines the efficiency of different machine learning algorithms in phishing detection on heterogeneous phishing datasets that include a publicly available UCI dataset, our generated datasets using tools such as EvilGinx and Zphisher, and AI generated datasets. Moreover, this work incorporates explainable AI (XAI) techniques such as Information Gain, SHAP (SHapley Additive Explanations), and LIME (Local Interpretable Model-Agnostic Explanations) to examine the most influential features impacting classification outcomes. To support practical deployment, this work also incorporates an MCP-based phishing URL detection system that offers real-time URL analysis, feature extraction, confidence-based classification, and AI-assisted security interpretation. The experimental results demonstrate that among classical models the highest accuracy is obtained by Logistic Regression at 92.44%, among ensemble models CatBoost achieved the highest accuracy at 95.01%, among neural network CNN achieved an accuracy of 94.02%, and among transformer-based models, DistilBERT got the highest accuracy at 99.78%
翻译:随着数字化转型和互联网使用的增长,网络钓鱼等社会工程学技术已成为用户和组织面临的主要问题。钓鱼攻击利用欺骗性手段诱骗用户泄露机密信息,导致组织遭受财务损失和声誉损害。根据Verizon的报告,36%的数据泄露事件涉及钓鱼攻击,这突显了对智能、自适应和可解释安全机制的需求。本文研究了不同机器学习算法在异构钓鱼数据集上的检测效率,这些数据集包括公开的UCI数据集、使用EvilGinx和Zphisher等工具生成的数据集,以及AI生成的数据集。此外,本文引入了信息增益、SHAP和LIME等可解释人工智能(XAI)技术,以分析影响分类结果的最具影响力的特征。为支持实际部署,本研究还整合了基于MCP的钓鱼URL检测系统,该系统提供实时URL分析、特征提取、基于置信度的分类以及AI辅助安全解释。实验结果表明,在经典模型中,逻辑回归的准确率最高,达到92.44%;在集成模型中,CatBoost的准确率最高,达到95.01%;在神经网络中,CNN的准确率为94.02%;在基于Transformer的模型中,DistilBERT的准确率最高,达到99.78%。