City Research Online

Abstract

Machine learning is one of the most prominent technologies used to combat phishing detection, however, the vast amount of data required for training models for detection raises a privacy concern for end users. Gathering email or document data may very well contain private information and the machine learning models learn from the words and other attributes from these text based documents. Gathering this information in a centralized location and using them to train models could pose a security risk on all levels of data acquisition, from the transfer of the data to the storage. Federated learning is emerging as a promising alternative to traditionally centralized machine learning for phishing detection. The advantages of federated learning, mainly in privacy and scalability, are weighed against the issue of detection accuracy. Federated learning provides the ability to train models without the transfer of sensitive data, more or less no raw data from the device and allows the training to be done locally; this eliminates the privacy exposure accompanied with traditional machine learning models that operate in a centralized manner. However, this alone is not enough to comply to privacy regulations like GDPR, the EU AI act and privacy preserving technology must be used in conjunction to ensure federated learning’s compliance to privacy regulations. This paper is a dedication to Professor Thomas Chen’s aspirations in the field of Cyber Security. This paper is dedicated to his memory.

Publication Type:	Article
Additional Information:	© IEEE.
Publisher Keywords:	0899 Other Information and Computing Sciences, 0906 Electrical and Electronic Engineering, 1608 Sociology, Information Systems, 4010 Engineering practice and education, 4410 Sociology
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Departments:	School of Science & Technology School of Science & Technology > Computer Science
SWORD Depositor:	Symplectic Administrator

Export

Downloads