{"id":"https://openalex.org/W349209475","doi":null,"title":"Understanding online malicious behavior: social malware and email spam","display_name":"Understanding online malicious behavior: social malware and email spam","publication_year":2013,"publication_date":"2013-01-01","ids":{"openalex":"https://openalex.org/W349209475","mag":"349209475"},"language":"en","primary_location":{"id":"mag:349209475","doi":null,"is_oa":false,"landing_page_url":"https://escholarship.org/content/qt8502w5xx/qt8502w5xx.pdf?t=mwkf1q","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5018876909","display_name":"Michalis Faloutsos","orcid":"https://orcid.org/0000-0002-3882-9987","observed_orcids":["https://orcid.org/0000-0002-3882-9987"]},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michalis Faloutsos","raw_affiliation_strings":["University of California, Riverside"],"raw_orcid":"https://orcid.org/0000-0002-3882-9987","affiliations":[{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080776695","display_name":"Harsha V. Madhyastha","orcid":"https://orcid.org/0000-0002-7978-9643","observed_orcids":["https://orcid.org/0000-0002-7978-9643","https://orcid.org/0009-0000-3921-5680"]},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Harsha V. Madhyastha","raw_affiliation_strings":["University of California, Riverside"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113729335","display_name":"Ting-Kai Huang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ting-Kai Huang","raw_affiliation_strings":["University of California, Riverside"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Riverside","institution_ids":["https://openalex.org/I103635307"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I103635307"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":93},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.0010000000474974513,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/spam","display_name":"spam","score":0.9879999756813049},{"id":"https://openalex.org/keywords/online-social-networks","display_name":"social networking sites","score":0.8820000290870667},{"id":"https://openalex.org/keywords/facebook","display_name":"Facebook","score":0.6539999842643738},{"id":"https://openalex.org/keywords/malware-propagation","display_name":"malware propagation","score":0.7250000238418579},{"id":"https://openalex.org/keywords/cascades","display_name":"cascades","score":0.8820000290870667},{"id":"https://openalex.org/keywords/facebook-application","display_name":"Facebook application","score":0.7480000257492065},{"id":"https://openalex.org/keywords/incentive-mechanisms","display_name":"incentive mechanisms","score":0.6679999828338623},{"id":"https://openalex.org/keywords/psychological-techniques","display_name":"psychological techniques","score":0.7919999957084656},{"id":"https://openalex.org/keywords/phishing","display_name":"phishing","score":0.7390000224113464},{"id":"https://openalex.org/keywords/library-instruction","display_name":"library instruction","score":0.4729999899864197}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7418157458305359},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.6786394119262695},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.645824134349823},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.6353870630264282},{"id":"https://openalex.org/C2779913896","wikidata":"https://www.wikidata.org/wiki/Q7063001","display_name":"Notice","level":2,"score":0.6237607598304749},{"id":"https://openalex.org/C518677369","wikidata":"https://www.wikidata.org/wiki/Q202833","display_name":"Social media","level":2,"score":0.5657760500907898},{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.520341157913208},{"id":"https://openalex.org/C4727928","wikidata":"https://www.wikidata.org/wiki/Q17164759","display_name":"Social network (sociolinguistics)","level":3,"score":0.5062145590782166},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.44208788871765137},{"id":"https://openalex.org/C27286358","wikidata":"https://www.wikidata.org/wiki/Q6031027","display_name":"Information cascade","level":2,"score":0.4216325283050537},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37991970777511597},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:349209475","doi":null,"is_oa":false,"landing_page_url":"https://escholarship.org/content/qt8502w5xx/qt8502w5xx.pdf?t=mwkf1q","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W9223698","https://openalex.org/W10754003","https://openalex.org/W15413744","https://openalex.org/W38924359","https://openalex.org/W74999755","https://openalex.org/W110492836","https://openalex.org/W155995321","https://openalex.org/W1233141674","https://openalex.org/W1481472066","https://openalex.org/W1546142792","https://openalex.org/W1590936031","https://openalex.org/W1606050636","https://openalex.org/W1925668703","https://openalex.org/W1965586806","https://openalex.org/W1978136502","https://openalex.org/W1984022436","https://openalex.org/W1986678144","https://openalex.org/W1992250165","https://openalex.org/W1996802155","https://openalex.org/W2023973750","https://openalex.org/W2027135291","https://openalex.org/W2046709315","https://openalex.org/W2047605254","https://openalex.org/W2074835059","https://openalex.org/W2087724533","https://openalex.org/W2090634555","https://openalex.org/W2091692346","https://openalex.org/W2096273775","https://openalex.org/W2098395374","https://openalex.org/W2099556653","https://openalex.org/W2112063328","https://openalex.org/W2113344319","https://openalex.org/W2120926619","https://openalex.org/W2120960514","https://openalex.org/W2121372682","https://openalex.org/W2122174302","https://openalex.org/W2127492100","https://openalex.org/W2128893310","https://openalex.org/W2133131640","https://openalex.org/W2140540364","https://openalex.org/W2144221002","https://openalex.org/W2146729596","https://openalex.org/W2152565070","https://openalex.org/W2153635508","https://openalex.org/W2156836300","https://openalex.org/W2160988289","https://openalex.org/W2163764145","https://openalex.org/W2163898372","https://openalex.org/W2165701072","https://openalex.org/W2174916093","https://openalex.org/W2290595649","https://openalex.org/W2294919332","https://openalex.org/W2398757235","https://openalex.org/W2407789839","https://openalex.org/W2409664136","https://openalex.org/W2752099845"],"related_works":["https://openalex.org/W74999755","https://openalex.org/W2157291863","https://openalex.org/W2766973901","https://openalex.org/W6922395169","https://openalex.org/W7046221949","https://openalex.org/W15413744","https://openalex.org/W2005002286","https://openalex.org/W7100403962","https://openalex.org/W1573696415","https://openalex.org/W7095211812"],"abstract_inverted_index":{"Online":[0],"social":[1,50,215,272,317],"networks":[2,216],"(OSNs)":[3],"have":[4,134],"become":[5],"a":[6,70],"popular":[7],"new":[8],"vector":[9],"for":[10,76],"distribution":[11],"of":[12,48,60,68,85,105,108,119,145,173,176,185,197,211,220,248,329,333,344,374],"malware":[13],"and":[14,217,271,338,364,381,384,387,396],"spam,":[15],"which":[16,27,163,266],"we":[17,55,141,179,267,323],"refer":[18],"to":[19,34,95,153,165,223,255,291,298,312,367,403],"as":[20],"socware":[21,38,57,94,177,186,225,239,253,261,286,314,337,357,383],".":[22],"Unlike":[23],"email":[24,346],"spam":[25,339,345],"-":[26,37],"is":[28,277,372],"mostly":[29],"sent":[30],"by":[31,74,93,123,131,137,190,200,238,351],"spammers":[32],"directly":[33],"intended":[35],"victims":[36],"leverages":[39],"in":[40,112,213,296,315],"great":[41],"part":[42],"on":[43,194,348,359,379],"the":[44,53,83,89,103,127,171,174,209,218,234,244,249,283,325,330,375,385],"word-of-":[45],"mouth":[46],"propagation":[47,397],"online":[49,214,316,334],"networks.":[51,318],"\r\nIn":[52],"dissertation,":[54],"study":[56],"through":[58,99],"analysis":[59,172],"173":[61],"billions":[62],"posts":[63,128],"collected":[64],"from":[65,226],"16K":[66],"users":[67,151,191,201,212,366],"MyPageKeeper,":[69],"Facebook":[71,124,156,227],"application":[72,157],"created":[73],"ourselves,":[75],"ten":[77],"months.":[78],"We":[79,115,258],"uncover":[80],"not":[81,206,321],"only":[82,207],"ecosystem":[84],"socware,":[86],"but":[87,228,320],"also":[88,229],"incentive":[90,264],"mechanisms":[91,265,398],"used":[92,237],"help":[96,390],"itself":[97],"spread":[98],"Facebook.":[100],"\r\nWe":[101],"observe":[102],"emergence":[104],"AppNets,":[106],"groups":[107],"applications":[109,132],"that":[110,117,133,143,149,181,252,260,307,399],"collaborate":[111],"enabling":[113],"cascades.":[114],"found":[116],"44%":[118],"cascades":[120,146,187,287],"are":[121,129],"enabled":[122],"applications,":[125],"i.e.,":[126],"made":[130],"been":[135],"installed":[136],"luring":[138],"users.":[139,257],"Moreover,":[140],"notice":[142],"37%":[144],"contains":[147],"URLs":[148],"direct":[150],"back":[152],"Facebook,":[154,198],"either":[155],"installation":[158],"pages":[159,162],"or":[160,199,355],"cooperate":[161],"want":[164],"get":[166,292],"an":[167,309],"Like":[168],"endorsements.":[169],"\r\nDuring":[170],"provenance":[175],"posts,":[178],"find":[180],"more":[182],"than":[183],"half":[184],"were":[188],"propagate":[189],"clicking":[192],"Like/Share":[193],"websites":[195],"outside":[196],"manually":[202],"posting":[203],"spam.":[204],"It":[205],"shows":[208],"carelessness":[210],"importance":[219],"user":[221],"education":[222],"eliminate":[224],"raise":[230],"our":[231,294],"interest":[232],"about":[233],"incentives":[235,290],"mechanism":[236],"distributors.":[240],"Our":[241,301,370],"work":[242,371],"provides":[243],"first":[245,376],"systematic":[246],"taxonomy":[247],"psychological":[250],"techniques":[251],"uses":[254,262],"lure":[256],"show":[259,306,324],"several":[263],"group":[268],"into":[269],"financial":[270],"incentives.":[273,300],"A":[274],"striking":[275],"findings":[276],"that,":[278],"much":[279],"like":[280],"biological":[281],"viruses,":[282],"most":[284,343],"effective":[285,310],"use":[288],"multiple":[289],"around":[293],"diversity":[295],"susceptibility":[297],"distinct":[299],"observations,":[302],"supported":[303],"with":[304],"simulations,":[305],"it":[308,388],"strategy":[311],"distribute":[313],"Last":[319],"least,":[322],"very":[326],"different":[327],"characteristics":[328],"two":[331],"generations":[332],"malicious":[335],"behavior:":[336],"emails.":[340],"For":[341],"example,":[342],"focus":[347,358],"earning":[349],"commission":[350],"selling":[352],"cheap":[353],"pharmaceutical":[354],"counterfeits,":[356],"phishing":[360],"users'":[361],"personal":[362],"information":[363],"ask":[365],"complete":[368],"surveys.":[369],"one":[373],"studies":[377],"focusing":[378],"measuring":[380],"modeling":[382],"mechanisms,":[386],"can":[389,400],"us":[391],"better":[392],"understand":[393],"its":[394],"intention":[395],"lead":[401],"ultimately":[402],"stopping":[404],"it.":[405]},"counts_by_year":[{"year":2023,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-06-24T00:00:00"}