PhishJEPA – a Transferable Phishing Email-Related Representation Learning

Abstract Phishing is a primary initial vector for data breaches and results in high global costs. While deep learning models achieve near-perfect in-domain detection, cross-corpus distribution shifts severely degrade performance owing to overfitting on dataset-specific artefacts instead of learning semantic intent. To address this, we introduce PhishJEPA, a self-supervised Joint Embedding Predictive Architecture using Exponential Moving Average student-teacher updates and Variance-Invariance-Covariance Regularisation to model email subject-body semantic relationships in latent space. We systematically evaluate representation transferability across four unseen benchmark corpora in two stages over multiple random seeds. In Stage 1 (feature probing), JEPA representations demonstrate statistically robust improvement in cross-corpus separability over vanilla DistilBERT under a linear probe (+0.0124 pooled AUROC, p ~= 9x10 -11 ), whereas multilayer perceptron probing (p ~= 0.93)and unsupervised domain adaptation (-0.0039 AUROC, p~=1x10 -9 ) offer no gains. In Stage 2 (downstream classification), freezing the JEPA backbone and training a lightweight linear head achieves a cross-corpus performance (0.9394 AUROC / 0.9157 AUPRC) comparable to full end-to-end DistilBERT fine-tuning (0.9496 AUROC), while reducing the training time by 60% and peak-allocated GPU memory by 43%. Crucially, we identify an operational capacity tradeoff: higher-capacity MLP heads overfit in-domain (0.9980 AUROC) and suffer larger cross-corpus performance drops (7.24%-19.20%) than linear heads (5.19%-10.63%), proving far less threshold stability. Finally, post-processing per-domain isotonic calibration reduces the fixed false-positive rates by up to 16.7% across training sources without degrading ranking performance. These findings indicate that JEPA learns transferable semantic representations, but reliable deployment under distribution shifts depends critically on a simple classifier design and post-hoc calibration.

Authors

Institutions

Publication Details

Journal
Research Square
Published
2026-11-02
DOI
https://doi.org/10.21203/rs.3.rs-11120622/v1
Primary Topic
Spam and Phishing Detection
Type
preprint
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
preprint

PhishJEPA – a Transferable Phishing Email-Related Representation Learning

Tad Gonsalves, Tandin Wangchuk, Karma Wangchuk
3 links
Research Square
Spam and Phishing Detection
preprint

PhishJEPA – a Transferable Phishing Email-Related Representation Learning

Tad Gonsalves, Tandin Wangchuk, Karma Wangchuk
preprint en

Abstract

Abstract Phishing is a primary initial vector for data breaches and results in high global costs. While deep learning models achieve near-perfect in-domain detection, cross-corpus distribution shifts severely degrade performance owing to overfitting on dataset-specific artefacts instead of learning semantic intent. To address this, we introduce PhishJEPA, a self-supervised Joint Embedding Predictive Architecture using Exponential Moving Average student-teacher updates and Variance-Invariance-Covariance Regularisation to model email subject-body semantic relationships in latent space. We systematically evaluate representation transferability across four unseen benchmark corpora in two stages over multiple random seeds. In Stage 1 (feature probing), JEPA representations demonstrate statistically robust improvement in cross-corpus separability over vanilla DistilBERT under a linear probe (+0.0124 pooled AUROC, p ~= 9x10 -11 ), whereas multilayer perceptron probing (p ~= 0.93)and unsupervised domain adaptation (-0.0039 AUROC, p~=1x10 -9 ) offer no gains. In Stage 2 (downstream classification), freezing the JEPA backbone and training a lightweight linear head achieves a cross-corpus performance (0.9394 AUROC / 0.9157 AUPRC) comparable to full end-to-end DistilBERT fine-tuning (0.9496 AUROC), while reducing the training time by 60% and peak-allocated GPU memory by 43%. Crucially, we identify an operational capacity tradeoff: higher-capacity MLP heads overfit in-domain (0.9980 AUROC) and suffer larger cross-corpus performance drops (7.24%-19.20%) than linear heads (5.19%-10.63%), proving far less threshold stability. Finally, post-processing per-domain isotonic calibration reduces the fixed false-positive rates by up to 16.7% across training sources without degrading ranking performance. These findings indicate that JEPA learns transferable semantic representations, but reliable deployment under distribution shifts depends critically on a simple classifier design and post-hoc calibration.

Research Square
Sophia University (JP)
Spam and Phishing Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Laika access coming soon
PhishJEPA – a Transferable Phishing Email-Related Representation Learning — Tad Gonsalves, Tandin Wangchuk, et al. · Research Square (2026) | TGRS Research Map | TGRS