Google claims to block 99.9% of phishing attacks using machine learning

AI deployed to fight fraudsters

Gmail app icon

Google has deployed machine learning technology on its Gmail service that it claims can now block 99.9% of all phishing attempts it detects.

In a blog post, Andy Wen, senior product manager of counter abuse technology at Google, said machine learning had helped Gmail block spam and phishing messages from showing up in a user's inbox with over 99.9% accuracy. 

"This is huge, given that 50-70% of messages that Gmail receives are spam," he said.

Wen explained that this dedicated machine learning model selectively delays messages (less than 0.05% of messages on average) to perform rigorous phishing analysis and further protect user data from compromise.

Advertisement - Article continues below
Advertisement - Article continues below

The detection models integrate with the machine learning supporting Safe Browsing, which is used to find and flag suspicious URLs.

"These new models combine a variety of techniques such as reputation and similarity analysis on URLs, allowing us to generate new URL click-time warnings for phishing and malware links," Wen said. "As we find new patterns, our models adapt more quickly than manual systems ever could, and get better with time." 

Gmail users in the enterprise will also be warned when replying to someone outside of their company domain to prevent data loss.

"Now, if you try to respond to someone outside of your company domain, you'll receive a quick warning to make sure you intended to send that email. And because Gmail has contextual intelligence, it knows if the recipient is an existing contact or someone you interact with regularly, to avoid displaying warnings unnecessarily," said Wen.

Google has also introduced improvements that will scan messages for ransomware or polymorphic malware.

"We classify new threats by combining thousands of spam, malware and ransomware signals with attachment heuristics (emails that could be threats based on signals) and sender signatures (already marked malware)," Wen said.

Featured Resources

What you need to know about migrating to SAP S/4HANA

Factors to assess how and when to begin migration

Download now

Your enterprise cloud solutions guide

Infrastructure designed to meet your company's IT needs for next-generation cloud applications

Download now

Testing for compliance just became easier

How you can use technology to ensure compliance in your organisation

Download now

Best practices for implementing security awareness training

How to develop a security awareness programme that will actually change behaviour

Download now


email delivery

How to recover deleted emails in Gmail

20 Jun 2019
internet security

Avast and AVG extensions pulled from Chrome

19 Dec 2019
Careers & training

The UK should follow Finland's lead with it comes to AI training

19 Dec 2019

Google confirms Android cameras can be hijacked to spy on you

20 Nov 2019

Most Popular

data governance

Brexit security talks under threat after UK accused of illegally copying Schengen data

10 Jan 2020
cyber security

If not passwords then what?

8 Jan 2020
web browser

What is HTTP error 503 and how do you fix it?

7 Jan 2020
Policy & legislation

GDPR and Brexit: How will one affect the other?

9 Jan 2020