Malicious URL Detection with Advanced Machine Learning and Optimization-Supported Deep Learning Models

• Published in: Applied sciences Vol. 15; no. 18; p. 10090
• Main Authors: Türk, Fuat, Kılıçaslan, Mahmut
• Format: Journal Article
• Language: English
• Published: Basel MDPI AG 01.09.2025
• Subjects: Accuracy; Algorithms; Analysis; Classification; Computational linguistics; Cybercrime; Cybersecurity; Data mining; Datasets; Deep learning; Efficiency; ELECTRA model; Feature selection; Internet fraud; Language processing; Machine learning; Malware; malware detection; Mathematical optimization; Methods; Natural language interfaces; optimization algorithms; Optimization techniques; Phishing; URLs; New York
• ISSN: 2076-3417; 2076-3417
• DOI: 10.3390/app151810090

This study presents a comprehensive comparative analysis of machine learning, deep learning, and optimization-based hybrid methods for malicious URL detection on the Malicious Phish dataset. For feature selection and model hyperparameter tuning, the Genetic Algorithm (GA), Particle Swarm Optimization (PSO), and Harris Hawk Optimizer (HHO) were employed. Both multiclass and binary classification tasks were addressed using classic machine learning algorithms such as LightGBM, XGBoost, and Random Forest, as well as deep learning models including LSTM, CNN, and hybrid CNN+LSTM architectures, with optimization support also integrated into these models. The experimental results reveal that the ELECTRA-based deep learning model achieved outstanding accuracy and F1-scores of up to 99% in both multiclass and binary scenarios. Although optimization-supported hybrid models also improved performance, the language-model-based ELECTRA architecture demonstrated a significant superiority over classical and optimized approaches. The findings indicate that optimization algorithms are effective in feature selection and enhancing model performance, yet next-generation language models clearly set a new benchmark in malicious URL detection.