Cybersecurity (Jun 2024)

Phishing behavior detection on different blockchains via adversarial domain adaptation

  • Chuyi Yan,
  • Xueying Han,
  • Yan Zhu,
  • Dan Du,
  • Zhigang Lu,
  • Yuling Liu

DOI
https://doi.org/10.1186/s42400-024-00237-5
Journal volume & issue
Vol. 7, no. 1
pp. 1 – 22

Abstract

Read online

Abstract Despite the growing attention on blockchain, phishing activities have surged, particularly on newly established chains. Acknowledging the challenge of limited intelligence in the early stages of new chains, we propose ADA-Spear-an automatic phishing detection model utilizing adversarial domain adaptive learning which symbolizes the method’s ability to penetrate various heterogeneous blockchains for phishing detection. The model effectively identifies phishing behavior in new chains with limited reliable labels, addressing challenges such as significant distribution drift, low attribute overlap, and limited inter-chain connections. Our approach includes a subgraph construction strategy to align heterogeneous chains, a layered deep learning encoder capturing both temporal and spatial information, and integrated adversarial domain adaptive learning in end-to-end model training. Validation in Ethereum, Bitcoin, and EOSIO environments demonstrates ADA-Spear’s effectiveness, achieving an average F1 score of 77.41 on new chains after knowledge transfer, surpassing existing detection methods.

Keywords