mlsanityData to 14 Oct 2026

BitAbuse: A Dataset of Visually Perturbed Texts for Defending Phishing Attacks

arXiv 2502.05225 ↗First posted 6 Feb 2025cs.CR cs.AIcited by 2

Not on the map. Why?

Abstract (arXiv)

Phishing often targets victims through visually perturbed texts to bypass security systems. The noise contained in these texts functions as an adversarial attack, designed to deceive language models and hinder their ability to accurately interpret the content. However, since it is difficult to obtain sufficient phishing cases, previous studies have used synthetic datasets that do not contain real-world cases. In this study, we propose the BitAbuse dataset, which includes real-world phishing cases, to address the limitations of previous research. Our dataset comprises a total of 325,580 visually perturbed texts. The dataset inputs are drawn from the raw corpus, consisting of visually perturbed sentences and sentences generated through an artificial perturbation process. Each input sentence is labeled with its corresponding ground truth, representing the restored, non-perturbed version. Language models trained on our proposed dataset demonstrated significantly better performance compared to previous methods, achieving an accuracy of approximately 96%. Our analysis revealed a significant gap between real-world and synthetic examples, underscoring the value of our dataset for building reliable pre-trained models for restoration tasks. We release the BitAbuse dataset, which includes real-world phishing cases annotated with visual perturbations, to support future research in adversarial attack defense.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 10 of its 31 references that are in the map. First posted on arXiv 6 Feb 2025.

Builds on

10 of 31 references.

References · 10

  1. 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
  2. 2018TextBugger: Generating Adversarial Text Against Real-world Applicationscited by 381
  3. 2019Combating Adversarial Misspellings with Robust Word Recognitioncited by 163
  4. 2019Text Processing Like Humans Do: Visually Attacking and Shielding NLP Systemscited by 101
  5. 2020CharacterBERT: Reconciling ELMo and BERT for Word-Level Open-Vocabulary Representations From Characterscited by 87
  6. 2020OpenAttack: An Open-source Textual Adversarial Attack Toolkitcited by 84
  7. 2021BERT-Defense: A Probabilistic Model Based on BERT to Combat Cognitively Inspired Orthographic Adversarial Attackscited by 17
  8. 2019ShamFinder: An Automated Framework for Detecting IDN Homographscited by 3
  9. 2023Learning the Legibility of Visual Text Perturbationscited by 3
  10. 2020Weaponizing Unicodes with Deep Learning -- Identifying Homoglyphs with Weakly Labeled Datacited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 1; 2026: 1.

2 papers.