Skip to content
Open access

Resilient Semantic Threat Detection at the Edge: A Knowledge Distillation Framework for SMS Spam Classification

Aug 2026 · International Journal of Creative and Open Research in Engineering and Management · 0 citations

TL;DR

A high-efficiency detection framework utilizing DistilBERT, a distilled knowledge representation of the BERT transformer is proposed, substantiate the viability of Knowledge Distillation as a mechanism to deploy state-of-the-art semantic security filters on edge infrastructure.

Abstract

The ubiquity of Application-to-Person (A2P) messaging has inadvertently created a robust vector for mobile security threats, specifically Smishing (SMS Phishing). Traditional lexical filters, such as Naive Bayes and Support Vector Machines (SVM), exhibit diminishing returns against modern obfuscated attacks due to their inability to interpret semantic context. While Transformer-based architectures like BERT have revolutionized Natural Language Processing (NLP), their computational latency renders them impractical for real-time deployment on resource-constrained mobile edge devices. This study proposes a high-efficiency detection framework utilizing DistilBERT, a distilled knowledge representation of the BERT transformer. By fine-tuning this architecture on the UCI SMS Spam Collection, we achieved a testing accuracy of 99.04% and a weighted F1-score of 0.9904. Notably, the model maintained a precision of 0.97 on the minority spam class, effectively mitigating the class imbalance problem without synthetic data augmentation. These results substantiate the viability of Knowledge Distillation as a mechanism to deploy state-of-the-art semantic security filters on edge infrastructure.     Keywords - SMS Spam, Knowledge Distillation, DistilBERT, Cybersecurity, Edge AI, NLP, Smishing, Transfer Learning

Read PDF

Similar papers

Open access Jul 2026

A Secure Lightweight SMS Spam Detection Framework with Robustness to Text Obfuscation Attacks

Experimental evaluations on the UCI SMS Spam Collection dataset demonstrate that the TF-IDF-PCA-DT pipeline achieves a detection accuracy of 99% while reducing model size by 77% and inference time by 75%, demonstrating the practicality of the proposed framework for real-world deployment in resource-constrained environments.

Baraa Tareq Hammad, Ismail Taha Ahmed, Mohamed A. Hafez et al. · 0 citations
Open access Aug 2026

Semantic information from smashed data: text reconstruction attack on phishing detection models in split learning

Phishing attacks via desktops, smartphones and internet of things devices are becoming increasingly sophisticated, posing critical security challenges for digital infrastructures. Defending against these attacks requires AI-based detection models that maintain high accuracy, since false positives or negatives can lead to severe breaches, while remaining lightweight enough to run on resource-constrained client devices. Split Learning (SL) meets these requirements by having clients compute only initial model layers locally and transmit intermediate activations (“smashed data”) to a server for the remaining inference, avoiding direct sharing of raw inputs. However, prior work in the image domain has shown that smashed data can leak original content, suggesting that SL may not be safe for user privacy. Therefore, it is essential to investigate whether these privacy risks also extend to language-model–based SL systems, which have fundamentally different neural network architectures, including attention mechanism. This paper introduces the Semantic Information Reconstruction Attack (SIRA), a novel framework designed to infer sensitive semantic elements directly from smashed data by leveraging the generative capabilities of large language models. In experiments on real-world phishing datasets, SIRA outperforms conventional reconstruction attacks in accurately inferring private webpage information. These findings reveal a potential privacy vulnerability in SL-based language models for security applications and motivate the development of targeted defense strategies.

Yushin Kim, Jungin Kim, Yongseok Kwon et al. · 0 citations
Open access Jul 2026

Detecting Phishing Websites Using a Hybrid Approach with DistilBERT, GNN and LightGBM

A hybrid phishing detection framework that integrates three complementary techniques: DistilBERT for semantic analysis of URL text, Graph Neural Networks for modelling structural relationships among URL components, and LightGBM for efficient metadata-based feature classification is proposed.

Ms. I. Shalini, Ms. G. Sujini · 0 citations
Open access Jul 2026

A Dual-Pipeline Imbalance-Robust Framework for SMS Spam Detection: Achieving Flawless Precision via SMOTE-Augmented Ensembles with Rigorous Statistical Validation

The rapid proliferation of digital communication has exponentially increased the volume of Short Message Service (SMS) spam, exposing mobile users to systemic convenience disruptions, productivity drops, and severe financial losses through sophisticated fraudulent schemes. To construct a highly dependable filtering mechanism, this study presents a rigorous dual-pipeline machine learning framework that systematically addresses the challenges of class imbalance in statistical text mining. Utilizing a verified dataset of 5,572 Indonesian-context short messages, the raw textual corpus is subjected to uniform case normalization, structural URL extraction, and character filtering before feature projection via Term Frequency–Inverse Document Frequency (TF-IDF) vectorization. To overcome the inherent accuracy paradox of skewed class distributions, the experimental design evaluates a baseline pipeline (imbalanced data) against a synthetic data augmentation pipeline leveraging the Synthetic Minority Oversampling Technique (SMOTE) across four distinct classifiers: Logistic Regression, Naive Bayes, Linear Support Vector Machine (Linear SVM), and Random Forest. Empirical results demonstrate that while the baseline Linear SVM serves as the optimal standalone model for overall balance, achieving a peak accuracy of 98.11% and a dominant F1-Score of 92.83%, the SMOTE-augmented Random Forest configuration yields an exceptional high-security alternative by securing a flawless 100.00% precision envelope alongside an 83.89% recall rate. Advanced post-hoc evaluations including McNemar's statistical significance tests (,  for Random Forest), qualitative error analyses of semantic edge cases, and runtime profiling confirm that the developed architecture establishes a highly scalable, mathematically verified, and low-latency solution suitable for integration into real-time telecom filtering gateways.

Zulpan Hadi, Selamet Riadi, Supardianto et al. · 0 citations
Open access Jul 2026

Large Language Models for phishing URL detection: A comparative study of LLaMA-3, GEMMA-7B, and traditional Machine Learning approaches

The proposed LLM-based framework offers a promising approach for improving phishing detection and strengthening modern cybersecurity defenses and suggests that transformer-based models can effectively identify deceptive domain structures, abnormal URL patterns, and obfuscation techniques.

L. Eliyan, M. Alshraideh, Bayan Alfayoumi · 0 citations
Open access Aug 2026

Phishing GAT: Adversarial-Hardened Phishing Email Detection via Semantic-Structural Fusion and Graph Attention Networks

PhishingGAT, a detector that fuses word-level semantic features with structural ones and is hardened against adversarial perturbation, is presented, a detector that fuses word-level semantic features with structural ones and is hardened against adversarial perturbation.

R. Kodali, Siva Rama Krishna T Dr · 0 citations