Phishing detection model using the hybrid approach to data protection in industrial control system
E.A. Mityukov, Andrey Vladimirovich Zatonsky, Плехов Павел Владимирович, Николай Валентинович Бильфельд · IOP Conference Series Materials Science and Engineering · 2019
Phishing is the procedure of tampering with sites, login and password forms, emails and so forth which simulate a legitimate analogy using methods and means of social engineering to deceive the victim in order to obtain his or her confidential information. We have conducted a statistical analysis of unique phishing attacks and the attacked areas. Today, there is an increase in attacks aimed at the manufacturing sector, in particular at industrial control systems (ICS). This area is the least protected today from external threats, including phishing. Taking this fact into account, we have investigated the features of an ICS in terms of possible phishing attacks. A comparative analysis of existing methods of protection against phishing, which are potentially applicable to ICSs, has been carried out. We have developed a method of combating phishing, consisting of 3 main modules: the module of obtaining the URL of the visited webpage, the filtering module based on white-list, the login form search module. The experiments resulted in true positive rate equal to 90.41%, false positive rate equal to 7.24%, precision and f1-measure being equal to 95.17% and 92.72%, respectively.