|
In related work, traditional phishing detection methods are mainly based on blacklist databases, rule-based filtering, and heuristic feature analysis. These approaches typically evaluate features such as domain name patterns, URL length, SSL certificate validity, and the presence of suspicious keywords to identify potential phishing websites.
Although these methods are computationally efficient and relatively simple to implement, they have several limitations. In particular, they struggle to adapt to new and evolving phishing techniques, often resulting in high false positive rates. This is especially problematic when dealing with zero-day phishing attacks and dynamically generated phishing URLs, which can easily bypass static detection rules. |