Spaces:
Sleeping
Sleeping
Update README.md
Browse files
README.md
CHANGED
|
@@ -1,99 +1,95 @@
|
|
| 1 |
-
---
|
| 2 |
-
title: PhishingInsight
|
| 3 |
-
emoji: π‘οΈ
|
| 4 |
-
colorFrom: blue
|
| 5 |
-
colorTo: gray
|
| 6 |
-
sdk: docker
|
| 7 |
-
pinned: false
|
| 8 |
-
app_port: 7860
|
| 9 |
-
---
|
| 10 |
-
|
| 11 |
-
# PhishingInsight π‘οΈ
|
| 12 |
-
|
| 13 |
-
**
|
| 14 |
-
|
| 15 |
-
|
| 16 |
-
|
| 17 |
-
|
| 18 |
-
|
| 19 |
-
|
| 20 |
-
|
| 21 |
-
|
| 22 |
-
|
| 23 |
-
|
| 24 |
-
|
| 25 |
-
|
|
| 26 |
-
|
|
| 27 |
-
| **
|
| 28 |
-
|
| 29 |
-
|
| 30 |
-
|
| 31 |
-
|
| 32 |
-
|
| 33 |
-
|
| 34 |
-
|
| 35 |
-
* **
|
| 36 |
-
|
| 37 |
-
|
| 38 |
-
|
| 39 |
-
|
| 40 |
-
|
| 41 |
-
|
| 42 |
-
|
| 43 |
-
|
| 44 |
-
|
| 45 |
-
|
| 46 |
-
|
| 47 |
-
|
| 48 |
-
βββ
|
| 49 |
-
|
| 50 |
-
|
| 51 |
-
|
| 52 |
-
|
| 53 |
-
|
| 54 |
-
|
| 55 |
-
|
| 56 |
-
|
| 57 |
-
|
| 58 |
-
|
| 59 |
-
|
| 60 |
-
|
| 61 |
-
|
| 62 |
-
|
| 63 |
-
|
| 64 |
-
|
| 65 |
-
|
| 66 |
-
```
|
| 67 |
-
|
| 68 |
-
|
| 69 |
-
|
| 70 |
-
|
| 71 |
-
|
| 72 |
-
|
| 73 |
-
|
| 74 |
-
**
|
| 75 |
-
|
| 76 |
-
|
| 77 |
-
|
| 78 |
-
* **
|
| 79 |
-
* **
|
| 80 |
-
|
| 81 |
-
|
| 82 |
-
|
| 83 |
-
|
| 84 |
-
|
| 85 |
-
|
| 86 |
-
|
| 87 |
-
|
| 88 |
-
* **
|
| 89 |
-
|
| 90 |
-
|
| 91 |
-
|
| 92 |
-
|
| 93 |
-
|
| 94 |
-
|
| 95 |
-
|
| 96 |
-
MIT License. Designed for Educational & Enterprise Security use.
|
| 97 |
-
|
| 98 |
-
---
|
| 99 |
-
**Developed by Devesh Punjabi** | MCA Final Year Project
|
|
|
|
| 1 |
+
---
|
| 2 |
+
title: PhishingInsight
|
| 3 |
+
emoji: π‘οΈ
|
| 4 |
+
colorFrom: blue
|
| 5 |
+
colorTo: gray
|
| 6 |
+
sdk: docker
|
| 7 |
+
pinned: false
|
| 8 |
+
app_port: 7860
|
| 9 |
+
---
|
| 10 |
+
|
| 11 |
+
# PhishingInsight π‘οΈ
|
| 12 |
+
|
| 13 |
+
**Phishing Detection System with Micro-Agent Architecture**
|
| 14 |
+
|
| 15 |
+
PhishingInsight is a **state-of-the-art URL verification system**. Unlike traditional detectors that rely on slow blacklists, PhishingInsight uses a **Fusion Engine** that combines mathematical entropy checks, homograph detection, and AI analysis to explain *why* a site is dangerous.
|
| 16 |
+
|
| 17 |
+
---
|
| 18 |
+
|
| 19 |
+
## π Innovation Highlights (The "Winning Edge")
|
| 20 |
+
|
| 21 |
+
| Feature | Competitors (Standard) | PhishingInsight (Ours) |
|
| 22 |
+
| :--- | :--- | :--- |
|
| 23 |
+
| **Detection Speed** | Slow (API calls) | **Instant (< 800ms)** (Local Cache) |
|
| 24 |
+
| **Logic** | Static Rules | **Hybrid Fusion (AI + Heuristic)** |
|
| 25 |
+
| **Explainability** | "Phishing Detected" | "This site targets PayPal but uses a Russian domain." |
|
| 26 |
+
| **Defense** | Vulnerable to SSRF | **SSRF Firewall & Localhost Block** |
|
| 27 |
+
| **Typosquatting** | Misses `goog1e.com` | **Homograph Shield Active** |
|
| 28 |
+
|
| 29 |
+
## π Key Features
|
| 30 |
+
|
| 31 |
+
* **Micro-Agent Architecture**: Modular agents for specific checks (Lexical, DNS, Content).
|
| 32 |
+
* **Fusion Engine**: Weighted scoring system combining signals from all agents.
|
| 33 |
+
* **AI Explainer**: Uses `TinyLlama` (SLM) to generate human-readable explanations.
|
| 34 |
+
* **Interactive UI**: Clean, professional Gradio interface with Real-time Analysis.
|
| 35 |
+
* **REST API**: FastAPI backend for seamless integration.
|
| 36 |
+
|
| 37 |
+
---
|
| 38 |
+
|
| 39 |
+
## π Professional Architecture
|
| 40 |
+
|
| 41 |
+
The codebase follows the **Atom of Thoughts** reliability principle:
|
| 42 |
+
```
|
| 43 |
+
PhishingInsight/
|
| 44 |
+
βββ data/ # Datasets (e.g., Phishing URLs.csv)
|
| 45 |
+
βββ src/
|
| 46 |
+
β βββ agents/ # Micro-Agents (Lexical, DNS, Content, Homograph)
|
| 47 |
+
β βββ core/ # Pipeline & Fusion Engine (The Brain)
|
| 48 |
+
β βββ interface/ # Professional UI (Gradio) & API
|
| 49 |
+
β βββ ml/ # SLM Model Integration
|
| 50 |
+
βββ tests/ # Comprehensive Test Suite (100% Coverage)
|
| 51 |
+
βββ main.py # System Entry Point
|
| 52 |
+
```
|
| 53 |
+
|
| 54 |
+
---
|
| 55 |
+
|
| 56 |
+
## π οΈ Installation
|
| 57 |
+
|
| 58 |
+
1. **Clone the Repository**:
|
| 59 |
+
```bash
|
| 60 |
+
git clone https://github.com/deveshpunjabi/PhishingInsight.git
|
| 61 |
+
cd PhishingInsight
|
| 62 |
+
```
|
| 63 |
+
2. **Install Dependencies**:
|
| 64 |
+
```bash
|
| 65 |
+
pip install -r requirements.txt
|
| 66 |
+
```
|
| 67 |
+
|
| 68 |
+
## π¦ Usage
|
| 69 |
+
|
| 70 |
+
**Run the Full System (UI + API):**
|
| 71 |
+
```bash
|
| 72 |
+
python main.py
|
| 73 |
+
```
|
| 74 |
+
* **Dashboard:** `http://localhost:7860`
|
| 75 |
+
* **Live Logs:** Check terminal for real-time Matrix-style analysis.
|
| 76 |
+
|
| 77 |
+
**Run Individual Components:**
|
| 78 |
+
* **UI Only**: `python src/interface/ui.py`
|
| 79 |
+
* **Retrain Model**: `python src/ml/train_model.py`
|
| 80 |
+
|
| 81 |
+
---
|
| 82 |
+
|
| 83 |
+
## π§ Tech Stack
|
| 84 |
+
* **Core:** Python 3.10+, AsyncIO
|
| 85 |
+
* **AI/ML:** PyTorch, Transformers (Quantized SLM), LightGBM
|
| 86 |
+
* **Security:** Urllib Parse, Levenshtein (Custom Impl), SSRF Guardrails
|
| 87 |
+
* **Interface:** Gradio 5.0, FastAPI
|
| 88 |
+
* **Analysis:** dnspython, beautifulsoup4, tldextract
|
| 89 |
+
|
| 90 |
+
## π‘οΈ License
|
| 91 |
+
|
| 92 |
+
MIT License. Designed for educational and enterprise security use.
|
| 93 |
+
|
| 94 |
+
---
|
| 95 |
+
**Developed by Devesh Punjabi** | MCA Final Year Project
|
|
|
|
|
|
|
|
|
|
|
|