SoK: A Comprehensive Reexamination of Phishing Research From the Security Perspective

摘要: Phishing and spear phishing are typical examples of masquerade attacks since trust is built up through impersonation for the attack to succeed. Given prevalence these attacks, considerable research has been conducted on problems along multiple dimensions. We reexamine existing from perspective unique needs security domain, which we call challenges : real-time detection, active attacker, dataset quality base-rate fallacy. explain then survey phishing/spear solutions in their light. This viewpoint consolidates literature illuminates several opportunities improving solutions. organize based detection techniques different vectors (e.g., URLs, websites, emails) with studies user awareness. For examine properties dataset, feature extraction, algorithms used, performance evaluation metrics. work can help guide development more effective defenses phishing, email future, as well provide a framework thorough comparison.