Human in the loop reinforcement learning framework for adaptive phishing detection

Phishing attacks remain a persistent threat in cybersecurity, exploiting human psychology to extract confidential information. Conventional machine learning and Reinforcement Learning (RL) approaches often rely on rigid binary reward structures that oversimplify phishing behavior and demand extensive datasets, limiting their practical deployment. This paper presents HARE (Human-guided Adaptive Reinforcement for Engineering), an RL-based framework that integrates human feedback to adaptively shape the agent’s reward signal. By incorporating scalar, context-aware guidance from experts, HARE enables faster convergence with fewer samples, improves adaptability to evolving phishing tactics, and captures subtle behavioral cues frequently missed by automated detectors. Experimental evaluation on the publicly available PhiUSIIL dataset shows that HARE achieves an F1-score of 97.62% with a false positive rate of 2.55%, confirming its reliability and data efficiency for adaptive phishing detection.

Institutions

Publication Details

Journal
Discover Computing
Published
2025-12-18
DOI
https://doi.org/10.1007/s10791-025-09849-y
Primary Topic
Spam and Phishing Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Human in the loop reinforcement learning framework for adaptive phishing detection

Discover Computing
Spam and Phishing Detection
article

Human in the loop reinforcement learning framework for adaptive phishing detection

article en

Abstract

Phishing attacks remain a persistent threat in cybersecurity, exploiting human psychology to extract confidential information. Conventional machine learning and Reinforcement Learning (RL) approaches often rely on rigid binary reward structures that oversimplify phishing behavior and demand extensive datasets, limiting their practical deployment. This paper presents HARE (Human-guided Adaptive Reinforcement for Engineering), an RL-based framework that integrates human feedback to adaptively shape the agent’s reward signal. By incorporating scalar, context-aware guidance from experts, HARE enables faster convergence with fewer samples, improves adaptability to evolving phishing tactics, and captures subtle behavioral cues frequently missed by automated detectors. Experimental evaluation on the publicly available PhiUSIIL dataset shows that HARE achieves an F1-score of 97.62% with a false positive rate of 2.55%, confirming its reliability and data efficiency for adaptive phishing detection.

Discover ComputingVol. 28(1)
Effat University (SA)
Openalex Percentile: Top 26%
Spam and Phishing Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.