Phishing websites still pose a threat to internet users by using well-known domain names and confusing URL formats to trick them into divulging confidential information. This research proposes a phishing website detection system and a cyberattack prevention system based on a deep learning model designed to detect whether raw URLs are phishing or legitimate, leveraging a transformer model. The system analyzes URL sequences to identify patterns, domain name irregularities, suspicious tokens, unusual lengths, special character usage, and deceptive subdomains. A web interface enables the user to input URLs, and the Flask backend performs pre-processing, tokenization, model inference, and suspicious feature identification. The proposed method fuses the transformer-based semantic representation of the URL and lexical feature analysis to reliably detect phishing and provide explainable warning features. The system creates a prediction label, confidence score, and suspicious features in real time to support the decision-making process. This work provides a practical and scalable solution for phishing identification, user protection, and web-based cyberattack prevention.
Dr. N. Ramadevi, Dr. K. Uday, Kumar et al.· 2026 International Conferenc...· 0 citations
Large-scale DDoS attacks remain a serious threat to today's networked systems, which aim to make services unavailable by sending a massive amount of traffic. The traditional detection methods are mostly about attack categorization and are not that context-aware or actionable in providing support to security analysts. We propose SentinelsGuard AI, a self-learning DDoS classification and mitigation system that is built from a combination of machine learning, retrieval-augmented knowledge, and LLM-based reasoning in one platform. The proposed system is realized as a Flask-based web application, which processes the network flow statistics data, extracted from incoming traffic, and transforms the data to generate representative features of the network flows, before detecting the attacks using the XGBoost classifier. After classification, the framework accesses domain-specific attack intelligence from a structured Retrieval-Augmented Generation (RAG) knowledge base with profiles of multiple categories of DDoS attacks. This contextual information is used with LLM-enabled reasoning to derive comprehensible security explanations, determine the severity of the attack, and suggest the firewall mitigation rules that can be applied. The framework stores analysis data in a SQLite database for operational monitoring, and displays security events in an interactive dashboard that includes traffic visualization, attack logs, and threat summaries. The architecture proposed brings statistical learning together with contextual knowledge of cybersecurity and attempts to bridge the gap between automatic attack detection and explainable incident response. It integrates all the key features of a classification-based network security decision support platform into a single stream, enabling a classification-based approach to network security to become more interpretable and usable in reality: persistent logging, visualization, knowledge retrieval, reasoning, and system recommendation of mitigations.
K. Phani, P. Karthik, PG Student et al.· 2026 International Conferenc...· 0 citations