Adversarial Testing Framework for AI-Generated Phishing Detection : Methodology and Empirical Evaluation

This paper presents an adversarial testing framework for evaluating the robustness of machine learning-based phishing detection systems against AI-generated adversarial email content. Two TF-IDF-based classifiers Logistic Regression and Support Vector Machine are evaluated on a balanced dataset of 1,600 emails under both standard and adversarially transformed conditions. Adversarial samples are generated through synonym substitution and structural camouflage techniques. Results demonstrate statistically significant performance degradation under adversarial conditions, with a critical asymmetric failure mode identified: both classifiers maintain a 0.0% false positive rate while detection sensitivity is substantially reduced, creating a silent evasion channel in deployed systems. Statistical validation is performed using McNemar's test and bootstrap confidence intervals. This work establishes adversarial robustness evaluation as a necessary component of phishing detection assessment, particularly as AI-generated content increasingly characterises real-world attack vectors.

Authors

Institutions

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-05-18
DOI
https://doi.org/10.5281/zenodo.20268273
Primary Topic
Spam and Phishing Detection
Type
preprint
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
preprint

Adversarial Testing Framework for AI-Generated Phishing Detection : Methodology and Empirical Evaluation

Arnika Madushani Rangalla
Zenodo (CERN European Organization for Nuclear Research)
Spam and Phishing Detection
preprint

Adversarial Testing Framework for AI-Generated Phishing Detection : Methodology and Empirical Evaluation

Arnika Madushani Rangalla
preprint en

Abstract

This paper presents an adversarial testing framework for evaluating the robustness of machine learning-based phishing detection systems against AI-generated adversarial email content. Two TF-IDF-based classifiers Logistic Regression and Support Vector Machine are evaluated on a balanced dataset of 1,600 emails under both standard and adversarially transformed conditions. Adversarial samples are generated through synonym substitution and structural camouflage techniques. Results demonstrate statistically significant performance degradation under adversarial conditions, with a critical asymmetric failure mode identified: both classifiers maintain a 0.0% false positive rate while detection sensitivity is substantially reduced, creating a silent evasion channel in deployed systems. Statistical validation is performed using McNemar's test and bootstrap confidence intervals. This work establishes adversarial robustness evaluation as a necessary component of phishing detection assessment, particularly as AI-generated content increasingly characterises real-world attack vectors.

Zenodo (CERN European Organization for Nuclear Research)
Lincoln University College (MY)
Peace, Justice and strong institutions
Spam and Phishing Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.