Detecting Phishing Websites with Random Forest

  • Shinelle HutchinsonEmail author
  • Zhaohe ZhangEmail author
  • Qingzhong LiuEmail author
Conference paper
Part of the Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering book series (LNICST, volume 251)


Phishing has been a widespread issue for many years, claiming countless victims, some of which have not even realized that they fell prey. The sole purpose of phishing is to obtain sensitive information from its victims. There have yet to be a consensus on the best way to detect phishing. In this paper, we analyze web-based phishing detection by using Random Forest. Some important URL features are identified and our study shows that the detection performance with feature selection is improved.


Phishing Random forest Classification Website Detection 


  1. 1.
    Phishing—What Is Phishing?. (2018).
  2. 2.
    Dong, Z., Kapadia, A., Blythe, J., Camp, L.J.: Beyond the lock icon: real-time detection of phishing websites using public key certificates. In: 2015 APWG Symposium on Electronic Crime Research (eCrime). IEEE (2015)Google Scholar
  3. 3.
    Rao, R., Ali, S.: PhishShield: a desktop application to detect phishing webpages through heuristic approach. Procedia Comput. Sci. 54, 147–156 (2015)CrossRefGoogle Scholar
  4. 4.
    Rao, R.S., Pais, A.R.: Detecting phishing websites using automation of human behavior. In: Proceedings of the 3rd ACM Workshop on Cyber-Physical System Security - CPSS 17 (2017).
  5. 5.
    Kumar, B., Kumar, P., Mundra, A., Kabra, S.: DC scanner: detecting phishing attack. In: 2015 Third International Conference on Image Information Processing (ICIIP) (2015).
  6. 6.
    Mohammad, R., McCluskey, L., Thabtah, F.: UCI machine learning repository: phishing websites data set. (2015).
  7. 7.
    Gu, S., Wu, Q.: How Random Forest Algorithm Works in Machine Learning. Medium (2017).
  8. 8.
    Breiman, L., Cutler, A.: Random forests - classification description. (2004).
  9. 9.
    Papernot, N.: npapernot/phishing-detection. GitHub (2016).

Copyright information

© ICST Institute for Computer Sciences, Social Informatics and Telecommunications Engineering 2018

Authors and Affiliations

  1. 1.Sam Houston State UniversityHuntsvilleUSA

Personalised recommendations