Explainable Deep Learning Model for Phishing Email Detection Using XAI Techniques

ABSTRACT Phishing email attacks remain one of the most prevalent cybersecurity threats, causing significant financial and information losses worldwide. Although deep learning techniques have demonstrated high detection accuracy, their black-box nature limits trust and interpretability in real-world applications. This study proposes an explainable deep learning framework for phishing email detection based on a Bidirectional Long Short-Term Memory (BiLSTM) model integrated with SHAP (SHapley Additive exPlanations) for interpretability. A curated dataset of 3,332 email messages was constructed and preprocessed for experimental evaluation. The proposed model achieved an accuracy of 0.96, an F1-score of 0.95, and a ROC-AUC of 0.97, outperforming traditional machine learning (SVM) and CNN-based models. SHAP-based global and local explanations provide insights into feature contributions, enhancing transparency and trust in the model’s decisions. The results demonstrate that integrating explainable artificial intelligence techniques with deep learning significantly improves the reliability and applicability of phishing detection systems. Keywords: Phishing Detection, Deep Learning, LSTM, Explainable AI, SHAP, Cybersecurity, Email Security, Email Analysis, Deep Neural Networks

Authors

Institutions

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-03-08
DOI
https://doi.org/10.5281/zenodo.18908050
Primary Topic
Spam and Phishing Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Explainable Deep Learning Model for Phishing Email Detection Using XAI Techniques

Saif Eldein Alfahal, Ibrahim Mohammed Ahmed
Zenodo (CERN European Organization for Nuclear Research)
Spam and Phishing Detection
article

Explainable Deep Learning Model for Phishing Email Detection Using XAI Techniques

Saif Eldein Alfahal, Ibrahim Mohammed Ahmed
article en

Abstract

ABSTRACT Phishing email attacks remain one of the most prevalent cybersecurity threats, causing significant financial and information losses worldwide. Although deep learning techniques have demonstrated high detection accuracy, their black-box nature limits trust and interpretability in real-world applications. This study proposes an explainable deep learning framework for phishing email detection based on a Bidirectional Long Short-Term Memory (BiLSTM) model integrated with SHAP (SHapley Additive exPlanations) for interpretability. A curated dataset of 3,332 email messages was constructed and preprocessed for experimental evaluation. The proposed model achieved an accuracy of 0.96, an F1-score of 0.95, and a ROC-AUC of 0.97, outperforming traditional machine learning (SVM) and CNN-based models. SHAP-based global and local explanations provide insights into feature contributions, enhancing transparency and trust in the model’s decisions. The results demonstrate that integrating explainable artificial intelligence techniques with deep learning significantly improves the reliability and applicability of phishing detection systems. Keywords: Phishing Detection, Deep Learning, LSTM, Explainable AI, SHAP, Cybersecurity, Email Security, Email Analysis, Deep Neural Networks

Zenodo (CERN European Organization for Nuclear Research)
University of Kara (TG)
Openalex Percentile: Top 51%
Spam and Phishing Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.