Skip to content

Crafting evasive phishing URLs: exploiting tokenizer vulnerabilities in transformer-based detection systems

Jul 2026 · International Journal of Machine Learning and Cybernetics · Vol 17 · 0 citations · 42 references
Computer Science

TL;DR

This paper proposes Homoglyph-Guided Beam Search (HG-BS), an adversarial attack framework that generates evasive URLs preserving both visual appearance and functional validity under strict structural constraints, and establishes that current high-accuracy URL detectors rely on fragile token patterns rather than robust semantic understanding.

View source

Similar papers

Preprint Aug 2026

Adversarial Robustness in Smishing Detection: A Comparative Analysis of Adversarial Fragility in Classical vs. Transformer-Based Detection Systems

It is demonstrated that clean-text performance is not a reliable predictor of adversarial robustness, and the results underscore the necessity for architecture-specific defences and frame smishing detection as an adversarial cybersecurity challenge rather than a static classification task.

Denzel Chiuseni, A. Bahizire, Silva Hama et al. · 0 citations
Jul 2026

Adversarial Prompts for Acceptance Collapse in Speculative Decoding

ADSD is introduced, which is the first prompt-suffix attack that collapses verifier acceptance by pushing draft probability mass toward tokens the target is unlikely to accept, and successfully generates highly effective adversarial suffixes.

Run-Min Wang, Chaoyi Zhou, Xi Liu et al. · 0 citations
Open access Aug 2026

Phishing GAT: Adversarial-Hardened Phishing Email Detection via Semantic-Structural Fusion and Graph Attention Networks

PhishingGAT, a detector that fuses word-level semantic features with structural ones and is hardened against adversarial perturbation, is presented, a detector that fuses word-level semantic features with structural ones and is hardened against adversarial perturbation.

R. Kodali, Siva Rama Krishna T Dr · 0 citations
Review Jul 2026

ALIBI: Adaptive Agentic Attacks on LLM-Based Vulnerability Detectors via Adversarial Code Comments

AlIBI is presented, an automated adaptive black-box attack framework that generates and iteratively refines adversarial comments using detector reasoning and feedback and is motivated to motivate security-aware designs that carefully calibrate trust between natural-language context and program evidence.

Zixuan Wu, Cristina Nita-Rotaru · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.