Business Email Compromise Phishing Detection Based on Machine Learning: A Systematic Literature Review

Abstract

The risk of cyberattacks against businesses has risen considerably, with Business Email Compromise (BEC) schemes taking the lead as one of the most common phishing attack methods. The daily evolution of this assault mechanism’s attack methods has shown a very high level of proficiency against organisations. Since the majority of BEC emails lack a payloader, they have become challenging for organisations to identify or detect using typical spam filtering and static feature extraction techniques. Hence, an efficient and effective BEC phishing detection approach is required to provide an effective solution to various organisations to protect against such attacks. This paper provides a systematic review and examination of the state of the art of BEC phishing detection techniques to provide a detailed understanding of the topic to allow researchers to identify the main principles of BEC phishing detection, the common Machine Learning (ML) algorithms used, the features used to detect BEC phishing, and the common datasets used. Based on the selected search strategy, 38 articles (of 950 articles) were chosen for closer examination. Out of these articles, the contributions of the selected articles were discussed and summarised to highlight their contributions as well as their limitations. In addition, the features of BEC phishing used for detection were provided, as well as the ML algorithms and datasets that were used in BEC phishing detection models were discussed. In the end, open issues and future research directions of BEC phishing detection based on ML were discussed.

BEC Defender: QR Code-Based Methodology for Prevention of Business Email Compromise (BEC) Attacks

“…When it comes to business email compromise (BEC) attacks, machine learning can be a valuable tool in detecting and preventing such threats. Machine learning can help combat BEC attacks in several ways [ 29 ]. Firstly, it can be used to analyze historical email data and identify patterns associated with known BEC attacks.…”

Synthesizing Ai's Impact on Cybersecurity in Telecommunications: A Conceptual Framework

“…In cybersecurity, NLP techniques are utilized for text analysis, sentiment analysis, and language-based threat detection (Aghaei et al, 2022). By processing and analyzing textual data from various sources such as emails, social media, and chat logs, NLP algorithms can identify indicators of compromise, phishing attempts, and other malicious activities (Atlam, and Oluwatimilehin, 2022). Deep learning, a subset of ML, involves artificial neural networks with multiple layers of interconnected nodes.…”

Phishing Attacks: Unraveling Tactics, Threats, and Defenses in the Cybersecurity Landscape

“…Business Email Compromise (BEC) represents a sophisticated and continually evolving cyber threat that poses substantial risks to organizational integrity and financial security. BEC attacks involve the impersonation of a trusted or reputable source through fraudulent emails [21]. This section scrutinizes the intricate landscape of BEC, elucidating the nuanced tactics employed by threat actors.…”