arXiv:2511.12085cs.CRcs.AI2025-11被引 1

轻量Transformer模型+对抗训练+可解释性,提升钓鱼邮件检测的鲁棒与可信度

A Robust and Explainable Transformer-Based Framework for Phishing Email Detection

  • 用DistilBERT结合FGM和随机字符扰动增强抗干扰能力
  • 在真实数据集上准确率超基线模型,且对输入噪声更稳定
  • 融合多种可解释方法,生成人类可读的钓鱼证据说明,适合安全团队使用

钓鱼攻击日益复杂,电子邮件仍是主要攻击入口,利用人性弱点传播恶意软件或窃取敏感信息。基于Transformer的模型虽能有效理解上下文,但常被视为黑箱,且易受新型AI攻击影响。本文提出一种基于轻量级DistilBERT的钓鱼邮件检测框架,通过梯度对抗训练(FGM)结合随机字符级扰动,增强对嵌入层扰动和字符级噪声的鲁棒性。为提升透明度,集成三种可解释AI方法:LIME、SHAP与IG,用于解析模型决策过程。进一步设计结构化规则提示,驱动Flan-T5-Small生成自然语言、基于证据的解释。实验表明,该框架在准确率和抗干扰能力上均优于未增强的DistilBERT基线模型。此整合方案有助于弥合模型可靠性与用户信任之间的差距,推动可解释钓鱼检测的发展。

原文摘要 · Abstract (English)

Phishing and related cyber threats are becoming increasingly sophisticated, with email-based phishing remaining the most persistent attack vector. These attacks exploit human vulnerabilities to deliver malware or gain unauthorized access to sensitive information. Transformer-based models enhance phishing detection through robust contextual language understanding; yet they are often regarded as black boxes due to a lack of interpretability. Moreover, recent AI-enabled attacks further undermine model resilience. To address these challenges, this work proposes a lightweight phishing detection framework based on DistilBERT, a lightweight Transformer model. Robustness to embedding-level perturbations and character-level input noise is enhanced through gradient-based adversarial training using the Fast Gradient Method (FGM), combined with stochastic character-level perturbations. To improve transparency, three prominent Explainable AI (XAI) methods, LIME (Local Interpretable Model-agnostic Explanations), SHAP (SHapley Additive exPlanations), and IG (Integrated Gradients), are integrated to interpret model decision-making. A structured rule-based prompt combines model predictions and XAI features to guide Flan-T5-Small in generating plain-language, evidence-based explanations. Experimental results demonstrate that the proposed framework outperforms a standard DistilBERT-based detection model trained without robustness enhancements in terms of accuracy and resilience. This integrated approach helps bridge the gap between model reliability and user trust, advancing transparent phishing detection.

钓鱼检测可解释AI轻量模型对抗训练

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。