arXiv:2507.10854cs.CRcs.AI2025-07被引 6

构建首个真实高质大规模钓鱼网站数据集,推动检测模型可信评估

PhreshPhish: A Real-World, High-Quality, Large-Scale Phishing Website Dataset and Benchmark

  • 构建无泄漏、低误标率的高质量钓鱼网站数据集
  • 涵盖超20万真实网页,基线率更贴近现实场景
  • 提供可复现基准测试,适合安全研究与模型对比

网络钓鱼仍是普遍且持续增长的威胁,造成重大经济损失和声誉损害。尽管机器学习在实时检测中表现良好,但进展受限于缺乏大规模高质量数据集和基准。现有数据集普遍存在采集困难导致的质量问题,以及数据泄露和不真实的基线率,使性能评估过于乐观。本文提出PhreshPhish,一个大规模、高质的钓鱼网站数据集,显著优于现有公开数据集,在无效或误标数据点比例上表现更优。我们还设计了综合性基准数据集,通过减少泄漏、提升任务难度、增强多样性并调整更符合现实的基线率,实现更真实的模型评估。我们在多个方法上训练与评测,建立基准性能。该数据集和基准已发布于Hugging Face(https://huggingface.co/datasets/phreshphish/phreshphish),旨在推动检测模型的标准化、可信比较与进一步发展。

原文摘要 · Abstract (English)

Phishing remains a pervasive and growing threat, inflicting heavy economic and reputational damage. While machine learning has been effective in real-time detection of phishing attacks, progress is hindered by lack of large, high-quality datasets and benchmarks. In addition to poor-quality due to challenges in data collection, existing datasets suffer from leakage and unrealistic base rates, leading to overly optimistic performance results. In this paper, we introduce PhreshPhish, a large-scale, high-quality dataset of phishing websites that addresses these limitations. Compared to existing public datasets, PhreshPhish is substantially larger and provides significantly higher quality, as measured by the estimated rate of invalid or mislabeled data points. Additionally, we propose a comprehensive suite of benchmark datasets specifically designed for realistic model evaluation by minimizing leakage, increasing task difficulty, enhancing dataset diversity, and adjustment of base rates more likely to be seen in the real world. We train and evaluate multiple solution approaches to provide baseline performance on the benchmark sets. We believe the availability of this dataset and benchmarks will enable realistic, standardized model comparison and foster further advances in phishing detection. The datasets and benchmarks are available on Hugging Face (https://huggingface.co/datasets/phreshphish/phreshphish).

钓鱼检测数据集安全评估机器学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。