Real-Time Detection of Browser-in-the-Browser (BitB) Phishing Attacks Using Multi-Layer Machine Learning and Heuristic Analysis

Iyer, Gautham Karthik Venkata (2025) Real-Time Detection of Browser-in-the-Browser (BitB) Phishing Attacks Using Multi-Layer Machine Learning and Heuristic Analysis. Masters thesis, Dublin, National College of Ireland.

Preview	PDF (Master of Science) Download (1MB) | Preview
Preview	PDF (Configuration Manual) Download (1MB) | Preview

Abstract

A new class of social engineering risks known as Browser-in-the-Browser (BitB) phishing assaults involves attackers mimicking a browser login popup completely within the current webpage. These types of attacks circumvent conventional URL-based detection, mimic authentic authentication routines visually, and take advantage of users' confidence in well-known user interfaces.

This project presents a real-time BitB detection framework combining three complementary analysis layers — visual UI inspection via a Convolutional Neural Network (CNN), JavaScript code and behavior analysis via tokenized Long Short-Term Memory (LSTM) models and heuristics, and network-level verification of credential destinations.

Trained on a synthetic but diverse dataset of 400+ samples, the proposed system achieved 95% precision and 98% recall in controlled offline experiments, detecting all tested BitB cases before credential exfiltration. We compare this approach to existing anti-phishing protections and discuss deployment feasibility, false positive handling, and avenues for improving resilience against evolving threats.

Item Type:	Thesis (Masters)
Supervisors:	Name Email Salahuddin, Jawad UNSPECIFIED
Subjects:	Q Science > QA Mathematics > Electronic computers. Computer science T Technology > T Technology (General) > Information Technology > Electronic computers. Computer science Q Science > QA Mathematics > Computer software > Computer Security T Technology > T Technology (General) > Information Technology > Computer software > Computer Security Q Science > Q Science (General) > Self-organizing systems. Conscious automata > Machine learning
Divisions:	School of Computing > Master of Science in Cyber Security
Depositing User:	Ciara O'Brien
Date Deposited:	17 Aug 2026 14:51
Last Modified:	17 Aug 2026 14:51
URI:	https://norma.ncirl.ie/id/eprint/9533

Actions (login required)

View Item