{"id":"https://openalex.org/W134335166","doi":null,"title":"On Network-level Clusters for Spam Detection.","display_name":"On Network-level Clusters for Spam Detection.","publication_year":2010,"publication_date":"2010-02-01","ids":{"openalex":"https://openalex.org/W134335166","mag":"134335166"},"language":"en","primary_location":{"id":"mag:134335166","doi":null,"is_oa":false,"landing_page_url":"https://web.eecs.umich.edu/~zmao/Papers/ndssZhiyun2010.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Network and Distributed System Security Symposium","raw_type":null},"parent_works":[],"lineage":["https://openalex.org/W134335166"],"child_works_count":0,"type":"conference-paper","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022038961","display_name":"Zhiyun Qian","orcid":"https://orcid.org/0000-0003-1506-2522","observed_orcids":["https://orcid.org/0000-0003-1506-2522"]},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiyun Qian","raw_affiliation_strings":["University of Michigan\u2013Ann Arbor, Ann Arbor, United States"],"raw_orcid":"https://orcid.org/0000-0003-1506-2522","affiliations":[{"raw_affiliation_string":"University of Michigan\u2013Ann Arbor, Ann Arbor, United States","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003217329","display_name":"Zhuoqing Morley Mao","orcid":"https://orcid.org/0000-0002-9844-2055","observed_orcids":["https://orcid.org/0000-0002-9844-2055"]},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Z. Morley Mao","raw_affiliation_strings":["University of Michigan\u2013Ann Arbor, Ann Arbor, United States"],"raw_orcid":"https://orcid.org/0000-0002-9844-2055","affiliations":[{"raw_affiliation_string":"University of Michigan\u2013Ann Arbor, Ann Arbor, United States","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103462744","display_name":"Yinglian Xie","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yinglian Xie","raw_affiliation_strings":["Microsoft (United States), Redmond, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft (United States), Redmond, United States","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100728882","display_name":"Fang Yu","orcid":"https://orcid.org/0000-0001-9670-0826","observed_orcids":["https://orcid.org/0000-0001-9670-0826"]},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fang Yu","raw_affiliation_strings":["Microsoft (United States), Redmond, United States"],"raw_orcid":"https://orcid.org/0000-0001-9670-0826","affiliations":[{"raw_affiliation_string":"Microsoft (United States), Redmond, United States","institution_ids":["https://openalex.org/I1290206253"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.1367,"has_fulltext":false,"cited_by_count":46,"citation_normalized_percentile":{"value":0.9615214,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.0,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/spam-email-detection","display_name":"email spam detection","score":0.7099999785423279},{"id":"https://openalex.org/keywords/spamassassin","display_name":"SpamAssassin","score":0.9869999885559082},{"id":"https://openalex.org/keywords/false-negative-rate","display_name":"false negative rate","score":0.7570000290870667}],"concepts":[{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.9891787767410278},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7579296827316284},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.6365302801132202},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.6319630146026611},{"id":"https://openalex.org/C2985371682","wikidata":"https://www.wikidata.org/wiki/Q11135","display_name":"Ip address","level":2,"score":0.5046674013137817},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4830542206764221},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.46095186471939087},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.40207430720329285},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.371942937374115},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.20530319213867188}],"mesh":[],"locations_count":2,"locations":[{"id":"mag:134335166","doi":null,"is_oa":false,"landing_page_url":"https://web.eecs.umich.edu/~zmao/Papers/ndssZhiyun2010.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Network and Distributed System Security Symposium","raw_type":null},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.673.2522","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.673.2522","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://web.eecs.umich.edu/%7Ezhiyunq/pub/ndss10_spam_IP_clusters.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W8020565","https://openalex.org/W80155331","https://openalex.org/W113187444","https://openalex.org/W1559961194","https://openalex.org/W1590936031","https://openalex.org/W1593657937","https://openalex.org/W1925668703","https://openalex.org/W2080557752","https://openalex.org/W2096273775","https://openalex.org/W2108214308","https://openalex.org/W2112063328","https://openalex.org/W2113344319","https://openalex.org/W2114092087","https://openalex.org/W2120507151","https://openalex.org/W2124088278","https://openalex.org/W2142595254","https://openalex.org/W2160536005","https://openalex.org/W2240246332","https://openalex.org/W2406826643","https://openalex.org/W2489605978"],"related_works":["https://openalex.org/W2094765975","https://openalex.org/W7099266302","https://openalex.org/W2058074787","https://openalex.org/W7011366903","https://openalex.org/W2118593120","https://openalex.org/W2142081864","https://openalex.org/W2406826643","https://openalex.org/W1505281280","https://openalex.org/W2587328895","https://openalex.org/W1970956591"],"abstract_inverted_index":{"IP-based":[0,139],"blacklist":[1,19,51],"is":[2,20],"an":[3],"effective":[4],"way":[5],"to":[6,44,69,112],"filter":[7],"spam":[8,103,169],"emails.":[9],"However,":[10],"building":[11],"and":[12,28,73,82,93,96,152],"maintaining":[13],"individual":[14,46],"IP":[15,30,47,53],"addresses":[16,31],"in":[17,49],"the":[18,50,64,126,143,168],"difficult,":[21],"as":[22],"new":[23,85],"mali-cious":[24],"hosts":[25],"continuously":[26],"appear":[27],"their":[29,71],"may":[32],"also":[33],"change":[34],"over":[35],"time.":[36],"To":[37],"mitigate":[38],"this":[39,59],"problem,":[40],"researchers":[41],"have":[42],"proposed":[43],"replace":[45],"ad-dresses":[48],"with":[52,99,134],"clusters,":[54],"e.g.,":[55],"BGP":[56],"clus-ters.":[57],"In":[58],"paper,":[60],"we":[61,80,123,156],"closely":[62],"examine":[63],"accuracy":[65],"of":[66,167],"IP-cluster-based":[67],"approaches":[68],"understand":[70],"effec-tiveness":[72],"fundamental":[74],"limitations.":[75],"Based":[76],"on":[77],"such":[78],"understanding,":[79],"propose":[81],"implement":[83],"a":[84,101,113,119],"clus-tering":[86],"approach":[87,111,160],"that":[88,158,171],"considers":[89],"both":[90],"network":[91],"origin":[92],"DNS":[94],"information,":[95],"incorporate":[97],"it":[98],"SpamAssas-sin,":[100],"popular":[102],"filtering":[104],"system":[105],"widely":[106],"used":[107],"today.":[108,175],"Applying":[109],"our":[110,159],"7-month":[114],"email":[115,150],"trace":[116],"col-lected":[117],"at":[118],"large":[120],"university":[121],"department,":[122],"can":[124,161],"reduce":[125],"false":[127,144],"negative":[128],"rate":[129],"by":[130],"50":[131,165],"%":[132,166],"compared":[133],"directly":[135],"applying":[136],"various":[137],"public":[138],"blacklists":[140],"without":[141],"in-creasing":[142],"positive":[145],"rate.":[146],"Furthermore,":[147],"using":[148],"hon-eypot":[149],"accounts":[151],"real":[153],"user":[154],"accounts,":[155],"show":[157],"capture":[162],"30":[163],"%-":[164],"emails":[170],"slip":[172],"through":[173],"SpamAssassin":[174],"1":[176]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":5},{"year":2013,"cited_by_count":7},{"year":2012,"cited_by_count":5}],"updated_date":"2026-11-15T12:55:33.944570","created_date":"2016-06-24T00:00:00"}