A New Approach for Spear phishing Detection
Yohanes Priyo Atmojo, I Made Darma Susila, Muhammad Riza Hilmi, Erma Sulistyo Rini, Lilis Yuningsih, Dandy Pramana Hostiadi · 2021
Spear phishing is a malicious attack activity that occurs in e-mail sending communications. Spear phishing attacks aim to steal personal or confidential data with individual targets and are personal in nature. Several studies proposed the detection of spear phishing activities using a classification approach with a high false-positive value. In this paper, a new approach model was proposed for detecting spear phishing activity using the cosine-similarity. This research aims to detect host activity with a similar activity pattern to the spear phishing activity knowledge database. The proposed research's contribution is to develop a new detection model to detect spear phishing activities with a co-similarity approach based on network traffic data analysis that records the communication process of sending the e-mail on a computer network. The proposed model can detect spear phishing activity with a detection accuracy of 90.45%. This shows that the model has a good performance in detecting spear phishing activity in network traffic.