{"id":"https://openalex.org/W1561608006","doi":null,"title":"BOTMAGNIFIER: locating spambots on the internet","display_name":"BOTMAGNIFIER: locating spambots on the internet","publication_year":2011,"publication_date":"2011-08-08","ids":{"openalex":"https://openalex.org/W1561608006","mag":"1561608006"},"language":"en","primary_location":{"id":"pmh:oai:eprints.ucl.ac.uk.OAI2:1449030","doi":null,"is_oa":false,"landing_page_url":"http://discovery.ucl.ac.uk/1449030/","pdf_url":null,"source":{"id":"https://openalex.org/S4306400024","display_name":"UCL Discovery (University College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I45129253","host_organization_name":"University College London","host_organization_lineage":["https://openalex.org/I45129253"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"In: USENIX Association (2011)","raw_type":"Proceedings paper"},"parent_works":[],"lineage":["https://openalex.org/W1561608006"],"child_works_count":0,"type":"conference-paper","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046881273","display_name":"Gianluca Stringhini","orcid":"https://orcid.org/0000-0002-6162-578X","observed_orcids":["https://orcid.org/0000-0002-6162-578X"]},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gianluca Stringhini","raw_affiliation_strings":["University of California,Santa Barbara,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California,Santa Barbara,","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056790702","display_name":"Thorsten Holz","orcid":"https://orcid.org/0000-0002-2783-1264","observed_orcids":["https://orcid.org/0000-0002-2783-1264"]},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Thorsten Holz","raw_affiliation_strings":["Ruhr-University, Bochum"],"raw_orcid":"https://orcid.org/0000-0002-2783-1264","affiliations":[{"raw_affiliation_string":"Ruhr-University, Bochum","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044222343","display_name":"Brett Stone-Gross","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brett Stone-Gross","raw_affiliation_strings":["University of California,Santa Barbara,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California,Santa Barbara,","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414","observed_orcids":["https://orcid.org/0000-0001-5140-3414"]},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["University of California,Santa Barbara,"],"raw_orcid":"https://orcid.org/0000-0001-5140-3414","affiliations":[{"raw_affiliation_string":"University of California,Santa Barbara,","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369","observed_orcids":["https://orcid.org/0000-0002-3422-5369"]},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Giovanni Vigna","raw_affiliation_strings":["University of California,Santa Barbara,"],"raw_orcid":"https://orcid.org/0000-0002-3422-5369","affiliations":[{"raw_affiliation_string":"University of California,Santa Barbara,","institution_ids":["https://openalex.org/I154570441"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.913,"has_fulltext":false,"cited_by_count":38,"citation_normalized_percentile":{"value":0.94185403,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"28","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.0,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/spam-botnet","display_name":"spam botnet","score":0.878000020980835},{"id":"https://openalex.org/keywords/spam","display_name":"spam","score":0.8119999766349792},{"id":"https://openalex.org/keywords/botnet-mitigation","display_name":"botnet mitigation","score":0.7879999876022339}],"concepts":[{"id":"https://openalex.org/C158955206","wikidata":"https://www.wikidata.org/wiki/Q83058","display_name":"Spamming","level":3,"score":0.967195987701416},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.939062237739563},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7781559824943542},{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.747946560382843},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7047932744026184},{"id":"https://openalex.org/C127735637","wikidata":"https://www.wikidata.org/wiki/Q2306702","display_name":"Spambot","level":4,"score":0.676834762096405},{"id":"https://openalex.org/C157310412","wikidata":"https://www.wikidata.org/wiki/Q3140915","display_name":"Forum spam","level":5,"score":0.5767889618873596},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5758759379386902},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5631252527236938},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.43912386894226074},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.433743953704834},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.41864654421806335},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4136843979358673},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3263234496116638},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"pmh:oai:eprints.ucl.ac.uk.OAI2:1449030","doi":null,"is_oa":false,"landing_page_url":"http://discovery.ucl.ac.uk/1449030/","pdf_url":null,"source":{"id":"https://openalex.org/S4306400024","display_name":"UCL Discovery (University College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I45129253","host_organization_name":"University College London","host_organization_lineage":["https://openalex.org/I45129253"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"In: USENIX Association (2011)","raw_type":"Proceedings paper"},{"id":"mag:1561608006","doi":null,"is_oa":false,"landing_page_url":"http://seclab.cs.ucsb.edu/media/uploads/papers/botmagnifier-usenix11.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306421123","display_name":"USENIX Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"USENIX Security Symposium","raw_type":null},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.227.2961","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.227.2961","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://iseclab.org/papers/gianluca_usenix.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.385.326","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.385.326","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.ucsb.edu/~vigna/publications/2011_stringhini_holz_stone_kruegel_vigna_BotMagnifier.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W86173103","https://openalex.org/W113187444","https://openalex.org/W134335166","https://openalex.org/W1481472066","https://openalex.org/W1530266714","https://openalex.org/W1550514379","https://openalex.org/W1559961194","https://openalex.org/W1590936031","https://openalex.org/W1593657937","https://openalex.org/W1593743365","https://openalex.org/W1630225947","https://openalex.org/W1775772884","https://openalex.org/W1916198581","https://openalex.org/W1922851884","https://openalex.org/W2009916274","https://openalex.org/W2091692346","https://openalex.org/W2095610745","https://openalex.org/W2100307718","https://openalex.org/W2102671922","https://openalex.org/W2104209065","https://openalex.org/W2108214308","https://openalex.org/W2112063328","https://openalex.org/W2113344319","https://openalex.org/W2114092087","https://openalex.org/W2115734893","https://openalex.org/W2134385885","https://openalex.org/W2156453323","https://openalex.org/W2294919332","https://openalex.org/W2406563751","https://openalex.org/W2406826643"],"related_works":["https://openalex.org/W1593657937","https://openalex.org/W2134385885","https://openalex.org/W2513170699","https://openalex.org/W1530453268","https://openalex.org/W2626516022","https://openalex.org/W2002537105","https://openalex.org/W7095582519","https://openalex.org/W2042909046","https://openalex.org/W1917166000","https://openalex.org/W1992654648"],"abstract_inverted_index":{"Unsolicited":[0],"bulk":[1],"email":[2,211],"(spam)":[3],"is":[4,164,183,218],"used":[5],"by":[6,25,168,230],"cybercriminals":[7],"to":[8,14,48,51,63,89,125,150,174,185,202,207,220,264],"lure":[9],"users":[10,69],"into":[11],"scams":[12],"and":[13,85,112,129,156,199,222,244,248],"spread":[15],"malware":[16],"infections.":[17],"Most":[18],"of":[19,31,37,67,74,131,144,210,227,239,250],"these":[20,43,87],"unwanted":[21],"messages":[22,60],"are":[23,29,45,61,93,98,148],"sent":[24,62],"spam":[26,54,83,90,110,154,228,242,267],"botnets,":[27],"which":[28,57],"networks":[30],"compromised":[32],"machines":[33],"under":[34],"the":[35,77,96,127,179,186,208,240,246],"control":[36],"a":[38,64,71,122,195,224],"single":[39],"(malicious)":[40],"entity.":[41],"Often,":[42],"botnets":[44,91,253],"rented":[46],"out":[47,53],"particular":[49],"groups":[50],"carry":[52],"campaigns,":[55,84],"in":[56,70,82,194],"similar":[58,184],"mail":[59,171],"large":[65],"group":[66],"Internet":[68,180],"short":[72],"amount":[73],"time.":[75,255],"Tracking":[76],"bot-infected":[78],"hosts":[79,88,177,243],"that":[80,92,133,147,216,259],"participate":[81],"attributing":[86],"active":[94],"on":[95,178],"Internet,":[97],"challenging":[99],"but":[100],"important":[101],"tasks.":[102],"In":[103,117],"particular,":[104],"this":[105,118],"information":[106],"can":[107,262],"improve":[108,265],"blacklist-based":[109],"defenses":[111],"guide":[113],"botnet":[114],"mitigation":[115],"efforts.":[116],"paper,":[119],"we":[120,257],"present":[121],"novel":[123],"technique":[124,137,193],"support":[126],"identification":[128],"tracking":[130],"bots":[132,229],"send":[134],"spam.":[135],"Our":[136,213],"takes":[138],"as":[139],"input":[140],"an":[141],"initial":[142,162],"set":[143,163],"IP":[145],"addresses":[146],"known":[149],"be":[151],"associated":[152],"with":[153],"bots,":[155],"learns":[157],"their":[158],"spamming":[159,252],"behavior.":[160],"This":[161],"then":[165],"\u201cmagnified":[166],"\u201d":[167],"analyzing":[169],"large-scale":[170],"delivery":[172,209],"logs":[173],"identify":[175,221],"other":[176],"whose":[181],"behavior":[182,187],"previously":[188],"modeled.":[189],"We":[190,235],"implemented":[191],"our":[192,232,260],"tool,":[196],"called":[197],"BOTMAGNIFIER,":[198],"applied":[200],"it":[201,217],"several":[203],"data":[204],"streams":[205],"related":[206],"traffic.":[212],"results":[214,261],"show":[215,258],"possible":[219],"track":[223,245],"substantial":[225],"number":[226],"using":[231],"magnification":[233],"technique.":[234],"also":[236],"perform":[237],"attribution":[238],"identified":[241],"evolution":[247],"activity":[249],"well-known":[251],"over":[254],"Moreover,":[256],"help":[263],"state-of-the-art":[266],"blacklists.":[268],"1":[269]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":6},{"year":2014,"cited_by_count":7},{"year":2013,"cited_by_count":6},{"year":2012,"cited_by_count":6}],"updated_date":"2026-11-15T12:55:33.944570","created_date":"2016-06-24T00:00:00"}
