{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2022:JKBFBK4DFYIOX5USNV7OU32ZUJ","short_pith_number":"pith:JKBFBK4D","schema_version":"1.0","canonical_sha256":"4a8250ab832e10ebf6926d7eea6f59a25d0ac7f5e14bbf07500022321221101a","source":{"kind":"arxiv","id":"2212.05380","version":1},"attestation_state":"computed","paper":{"title":"Mitigating Adversarial Gray-Box Attacks Against Phishing Detectors","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Giovanni Apruzzese, V.S. Subrahmanian","submitted_at":"2022-12-11T00:25:45Z","abstract_excerpt":"Although machine learning based algorithms have been extensively used for detecting phishing websites, there has been relatively little work on how adversaries may attack such \"phishing detectors\" (PDs for short). In this paper, we propose a set of Gray-Box attacks on PDs that an adversary may use which vary depending on the knowledge that he has about the PD. We show that these attacks severely degrade the effectiveness of several existing PDs. We then propose the concept of operation chains that iteratively map an original set of features to a new set of features and develop the \"Protective "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2212.05380","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-12-11T00:25:45Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0463666906c551ce163647db9cdb63c3cc4bf9a0da98262f107b3e006abc88ca","abstract_canon_sha256":"6d6ed17aba28165953cf10bc05d7d380532bbd1c5aafb92357c931f87b7fa41e"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:24:03.243980Z","signature_b64":"IDwuPbejH0W5NjR/+ZBLWWx68XeK+hSgiVkWEFkRJXjsEzNTCh62orrs42aMNy8ol2mN2AMJT8FiQJHNvGPrBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4a8250ab832e10ebf6926d7eea6f59a25d0ac7f5e14bbf07500022321221101a","last_reissued_at":"2026-07-05T05:24:03.243591Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:24:03.243591Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Mitigating Adversarial Gray-Box Attacks Against Phishing Detectors","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Giovanni Apruzzese, V.S. Subrahmanian","submitted_at":"2022-12-11T00:25:45Z","abstract_excerpt":"Although machine learning based algorithms have been extensively used for detecting phishing websites, there has been relatively little work on how adversaries may attack such \"phishing detectors\" (PDs for short). In this paper, we propose a set of Gray-Box attacks on PDs that an adversary may use which vary depending on the knowledge that he has about the PD. We show that these attacks severely degrade the effectiveness of several existing PDs. We then propose the concept of operation chains that iteratively map an original set of features to a new set of features and develop the \"Protective "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.05380","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2212.05380/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2212.05380","created_at":"2026-07-05T05:24:03.243651+00:00"},{"alias_kind":"arxiv_version","alias_value":"2212.05380v1","created_at":"2026-07-05T05:24:03.243651+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.05380","created_at":"2026-07-05T05:24:03.243651+00:00"},{"alias_kind":"pith_short_12","alias_value":"JKBFBK4DFYIO","created_at":"2026-07-05T05:24:03.243651+00:00"},{"alias_kind":"pith_short_16","alias_value":"JKBFBK4DFYIOX5US","created_at":"2026-07-05T05:24:03.243651+00:00"},{"alias_kind":"pith_short_8","alias_value":"JKBFBK4D","created_at":"2026-07-05T05:24:03.243651+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/JKBFBK4DFYIOX5USNV7OU32ZUJ","json":"https://pith.science/pith/JKBFBK4DFYIOX5USNV7OU32ZUJ.json","graph_json":"https://pith.science/api/pith-number/JKBFBK4DFYIOX5USNV7OU32ZUJ/graph.json","events_json":"https://pith.science/api/pith-number/JKBFBK4DFYIOX5USNV7OU32ZUJ/events.json","paper":"https://pith.science/paper/JKBFBK4D"},"agent_actions":{"view_html":"https://pith.science/pith/JKBFBK4DFYIOX5USNV7OU32ZUJ","download_json":"https://pith.science/pith/JKBFBK4DFYIOX5USNV7OU32ZUJ.json","view_paper":"https://pith.science/paper/JKBFBK4D","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2212.05380&json=true","fetch_graph":"https://pith.science/api/pith-number/JKBFBK4DFYIOX5USNV7OU32ZUJ/graph.json","fetch_events":"https://pith.science/api/pith-number/JKBFBK4DFYIOX5USNV7OU32ZUJ/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/JKBFBK4DFYIOX5USNV7OU32ZUJ/action/timestamp_anchor","attest_storage":"https://pith.science/pith/JKBFBK4DFYIOX5USNV7OU32ZUJ/action/storage_attestation","attest_author":"https://pith.science/pith/JKBFBK4DFYIOX5USNV7OU32ZUJ/action/author_attestation","sign_citation":"https://pith.science/pith/JKBFBK4DFYIOX5USNV7OU32ZUJ/action/citation_signature","submit_replication":"https://pith.science/pith/JKBFBK4DFYIOX5USNV7OU32ZUJ/action/replication_record"}},"created_at":"2026-07-05T05:24:03.243651+00:00","updated_at":"2026-07-05T05:24:03.243651+00:00"}