{"id":"https://openalex.org/W7062873344","doi":null,"title":"Your Botnet is My Botnet: Analysis of a Botnet Takeover","display_name":"Your Botnet is My Botnet: Analysis of a Botnet Takeover","publication_year":2009,"publication_date":"2009-01-01","ids":{"openalex":"https://openalex.org/W7062873344"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.147.8202","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.147.8202","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.ucsb.edu/~vigna/publications/2009_stone-gross_cova_cavallaro_gilbert_szydlowski_kemmerer_kruegel_vigna_Torpig.pdf","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044222343","display_name":"Brett Stone-Gross","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Stone-Gross, Brett","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006916505","display_name":"Marco Cova","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cova, Marco","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Cavallaro, and Lorenzo","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cavallaro, and Lorenzo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085787456","display_name":"Bob Gilbert","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gilbert, Bob","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Szydlowski, Martin","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Szydlowski, Martin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109057758","display_name":"Richard A. Kemmerer","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kemmerer, Richard","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Kruegel, Christopher","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kruegel, Christopher","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369","observed_orcids":["https://orcid.org/0000-0002-3422-5369"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vigna, Giovanni","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5036908366","display_name":"Lorenzo Cavallaro","orcid":"https://orcid.org/0000-0002-3878-2680","observed_orcids":["https://orcid.org/0000-0002-3878-2680"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cavallaro, Lorenzo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":40.849,"has_fulltext":false,"cited_by_count":53,"citation_normalized_percentile":{"value":0.99623113,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":98},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.6064000129699707,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.6064000129699707,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.12610000371932983,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.10189999639987946,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnets","display_name":"botnets","score":0.9739999771118164},{"id":"https://openalex.org/keywords/malware","display_name":"malware","score":0.4390000104904175},{"id":"https://openalex.org/keywords/command-and-control","display_name":"command and control","score":0.6639999747276306},{"id":"https://openalex.org/keywords/personal-information-theft","display_name":"personal data theft","score":0.7160000205039978},{"id":"https://openalex.org/keywords/credit-card-data","display_name":"credit card data","score":0.6460000276565552},{"id":"https://openalex.org/keywords/data-collection","display_name":"data collection","score":0.3089999854564667}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9858999848365784},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.784600019454956},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6122000217437744},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.508899986743927},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.4790000021457672},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.47119998931884766},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3736000061035156},{"id":"https://openalex.org/C2983355114","wikidata":"https://www.wikidata.org/wiki/Q161380","display_name":"Credit card","level":3,"score":0.3474999964237213},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.3391000032424927},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.33410000801086426},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3231000006198883},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.26579999923706055}],"mesh":[],"locations_count":13,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.147.8202","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.147.8202","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.ucsb.edu/~vigna/publications/2009_stone-gross_cova_cavallaro_gilbert_szydlowski_kemmerer_kruegel_vigna_Torpig.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.148.3758","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.148.3758","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.ucsb.edu/~seclab/projects/torpig/torpig.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.207.3894","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.207.3894","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.ucsb.edu/~marco/data/papers/ccs09_torpig.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.360.172","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.360.172","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.ucsb.edu/~chris/research/doc/ccs09_botnet.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.361.6806","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.361.6806","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://seclab.cs.ucsb.edu/media/uploads/papers/torpig.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.387.3862","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.387.3862","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.it.uu.se/edu/course/homepage/datakom2/vt10/papers/botnet-ccs09.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.598.995","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.598.995","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www1.pacific.edu/~mmaxwel2/ecpe178/torpig.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.967.6578","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.967.6578","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://amnesia.gtisc.gatech.edu/%7Emoyix/CCS_09/docs/p635.pdf","raw_type":"text"},{"id":"pmh:oai:repository.royalholloway.ac.uk:3d209060-1479-5829-92f6-c7f79ffe5654/1","doi":null,"is_oa":false,"landing_page_url":"https://repository.royalholloway.ac.uk/items/3d209060-1479-5829-92f6-c7f79ffe5654/1/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401062","display_name":"Royal Holloway Digital Repository (Royal Holloway University of London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I184558857","host_organization_name":"Royal Holloway University of London","host_organization_lineage":["https://openalex.org/I184558857"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/report"},{"id":"pmh:oai:repository.royalholloway.ac.uk:9413ae4a-b3e1-146a-0d25-1bf784b6b986/1","doi":null,"is_oa":false,"landing_page_url":"https://repository.royalholloway.ac.uk/items/9413ae4a-b3e1-146a-0d25-1bf784b6b986/1/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401062","display_name":"Royal Holloway Digital Repository (Royal Holloway University of London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I184558857","host_organization_name":"Royal Holloway University of London","host_organization_lineage":["https://openalex.org/I184558857"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"16th ACM Conference on Computer and Communications Security (CCS)","raw_type":"info:eu-repo/semantics/bookPart"},{"id":"pmh:oai:repository.royalholloway.ac.uk:9413ae4a-b3e1-146a-0d25-1bf784b6b986/2","doi":null,"is_oa":false,"landing_page_url":"https://repository.royalholloway.ac.uk/items/9413ae4a-b3e1-146a-0d25-1bf784b6b986/2/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401062","display_name":"Royal Holloway Digital Repository (Royal Holloway University of London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I184558857","host_organization_name":"Royal Holloway University of London","host_organization_lineage":["https://openalex.org/I184558857"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"16th ACM Conference on Computer and Communications Security (CCS)","raw_type":"info:eu-repo/semantics/bookPart"},{"id":"pmh:oai:repository.royalholloway.ac.uk:9413ae4a-b3e1-146a-0d25-1bf784b6b986/3","doi":null,"is_oa":false,"landing_page_url":"https://repository.royalholloway.ac.uk/items/9413ae4a-b3e1-146a-0d25-1bf784b6b986/3/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401062","display_name":"Royal Holloway Digital Repository (Royal Holloway University of London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I184558857","host_organization_name":"Royal Holloway University of London","host_organization_lineage":["https://openalex.org/I184558857"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"16th ACM Conference on Computer and Communications Security (CCS)","raw_type":"info:eu-repo/semantics/bookPart"},{"id":"pmh:oai:repository.royalholloway.ac.uk:9413ae4a-b3e1-146a-0d25-1bf784b6b986/4","doi":null,"is_oa":false,"landing_page_url":"https://repository.royalholloway.ac.uk/items/9413ae4a-b3e1-146a-0d25-1bf784b6b986/4/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401062","display_name":"Royal Holloway Digital Repository (Royal Holloway University of London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I184558857","host_organization_name":"Royal Holloway University of London","host_organization_lineage":["https://openalex.org/I184558857"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"16th ACM Conference on Computer and Communications Security (CCS)","raw_type":"info:eu-repo/semantics/bookPart"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2100307718","https://openalex.org/W2125147044","https://openalex.org/W2045880951","https://openalex.org/W2172011174","https://openalex.org/W2902408484","https://openalex.org/W7099961288","https://openalex.org/W2328315826","https://openalex.org/W1551705282","https://openalex.org/W1499648394","https://openalex.org/W2558414657"],"abstract_inverted_index":{"Botnets,":[0],"networks":[1],"of":[2,15,19,31,67,78,96,120,165,174,186,191],"malware-infected":[3],"machines":[4],"that":[5,38,98,116,139,149,194],"are":[6,11],"controlled":[7],"by":[8,197],"an":[9],"adversary,":[10],"the":[12,23,68,99,110,118,121,142,157,177,187],"root":[13],"cause":[14],"a":[16,35,76,163,169,183],"large":[17],"number":[18,140],"security":[20],"problems":[21],"on":[22,61],"Internet.":[24],"A":[25],"particularly":[26,123],"sophisticated":[27],"and":[28,49,71,91,107,137,153,167,171,189],"insidious":[29],"type":[30,188],"bot":[32,135],"is":[33,39,127,160,195],"Torpig,":[34],"malware":[36],"program":[37],"designed":[40],"to":[41,64,132,141],"harvest":[42],"sensitive":[43],"information":[44,193],"(such":[45],"as":[46],"bank":[47],"account":[48],"credit":[50],"card":[51],"data)":[52],"from":[53,176],"its":[54,73],"victims.":[55,179],"In":[56],"this":[57,82],"paper,":[58],"we":[59,84],"report":[60],"our":[62,151],"efforts":[63],"take":[65],"control":[66,154],"Torpig":[69,111,158],"botnet":[70,112,159],"study":[72],"operations":[74],"for":[75],"period":[77],"ten":[79],"days.":[80],"During":[81],"time,":[83],"observed":[85],"more":[86,143],"than":[87,144],"180":[88],"thousand":[89],"infections":[90,136],"recorded":[92],"almost":[93],"70":[94],"GB":[95],"data":[97,122,175,181],"bots":[100],"collected.":[101],"While":[102],"botnets":[103],"have":[104],"been":[105],"\u201chijacked\u201d":[106],"studied":[108],"previously,":[109],"exhibits":[113],"certain":[114],"properties":[115],"make":[117],"analysis":[119],"interesting.":[124],"First,":[125],"it":[126],"possible":[128],"(with":[129],"reasonable":[130],"accuracy)":[131],"identify":[133],"unique":[134],"relate":[138],"1.2":[145],"million":[146],"IP":[147],"addresses":[148],"contacted":[150],"command":[152],"server.":[155],"Second,":[156],"large,":[161],"targets":[162],"variety":[164],"applications,":[166],"gathers":[168],"rich":[170],"diverse":[172],"set":[173],"infected":[178],"This":[180],"provides":[182],"new":[184],"understanding":[185],"amount":[190],"personal":[192],"stolen":[196],"botnets.":[198]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":6},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":4}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2025-10-10T00:00:00"}