A methodology for evaluating the effectiveness of an automated phishing detection pipeline based on FastText within the framework of a specialized AutoML library for analyzing barriers to the introduction of artificial intelligence into modern intrusion detection systems

The article presents an approach to phishing attack detection based on the constructionand automatic optimization of machine learning pipelines using a specialized library (PhishAutoML). The urgency of the problem is due to the evolution of phishing attacks that use socialengineering methods and lexical tricks, which makes traditional static protection methods ineffective. The theoretical foundations of text vectorization using the FastText model and its application within an AutoML approach based on Bayesian optimization, which allows for the automatic selection of hyperparameters for the entire pipeline, are described. The proposedPhishAutoML concept is used to build models capable of detecting phishing based on semanticanalysis and flexibly configuring the trade-off between quality and performance. The results ofcomputational experiments are presented: final metrics of quality and performance, as well as acomparative analysis with classical (TF-IDF) and modern (DistilBERT) approaches. The conclusions confirm the effectiveness of the proposed solution (achieving a phishing detection recall of 95%, which is several times higher than alternative methods) and outline directions forits further development. However, integrating AI into traditional intrusion detection and prevention systems poses significant risks and challenges. This article explores the key technical, organizational, and ethical barriers that hinder the widespread adoption of AI-powered solutions andsuggests potential solutions to overcome them.