多智能体大模型动态协作,精准识别钓鱼邮件并生成人话解释。
MultiPhishGuard: An Explainable and Adaptive Multi-Agent LLM System for Phishing Email Detection
- 五个专用智能体协同工作,动态加权决策
- 准确率达97.89%,误报率2.73%,漏报仅0.20%
- 自动生成对抗样本提升鲁棒性,适合安全团队部署
钓鱼邮件检测面临不断演进的攻击策略和多样化的攻击模式挑战。传统规则过滤和黑名单方法难以应对,导致漏检与安全风险。尽管机器学习方法有所改进,但对新型快速变化的钓鱼策略适应能力仍有限。本文提出MultiPhishGuard,一种基于大模型的多智能体检测框架,包含文本、URL、元数据、解释简化器和对抗智能体五类协作单元,通过近端策略优化动态调整各智能体权重。系统引入基于LLM的对抗训练循环,由智能体生成上下文感知的细微邮件变体,暴露模型弱点并增强对模糊钓鱼案例的鲁棒性。在公开数据集上的实验表明,MultiPhishGuard性能优于现有基线(包括思维链提示和单智能体版本),准确率达到97.89%,误报率为2.73%,漏报率为0.20%。此外,解释简化器将技术输出转化为面向用户的通俗推理。结果表明,具备自适应协调与对抗训练的多智能体架构为钓鱼邮件检测提供了新方向。
原文摘要 · Abstract (English)
Phishing email detection faces significant challenges due to evolving adversarial tactics and heterogeneous attack patterns. Traditional approaches, such as rule-based filters and denylists, often struggle to keep pace, leading to missed detections and security risks. While machine learning methods have improved detection performance, they remain limited in adapting to novel and rapidly changing phishing strategies. We present MultiPhishGuard, an LLM-based multi-agent detection framework with learned coordination across specialized agents. The system consists of five cooperative agents (text, URL, metadata, explanation simplifier, and adversarial agents), with agent contributions dynamically weighted using Proximal Policy Optimization. To address emerging threats, the framework incorporates an adversarial training loop in which an LLM-based agent generates subtle, context-aware email variants to expose potential model weaknesses and improve robustness to ambiguous phishing cases. Experimental evaluations on public datasets show that MultiPhishGuard achieves stronger performance than established baselines, including Chain-of-Thought prompting and single-agent variants, as supported by ablation studies and comparative analyses. The system achieves an accuracy of 97.89%, with a false positive rate of 2.73% and a false negative rate of 0.20%. In addition, an explanation simplifier agent transforms technical model outputs into plain-language rationales intended for human users. Overall, these results suggest that multi-agent LLM architectures with adaptive coordination and adversarial training represent a promising direction for phishing email detection.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。