{"id":"https://openalex.org/W4385733861","doi":"https://doi.org/10.1093/cybsec/tyad014","title":"Digital fingerprinting for identifying malicious collusive groups on Twitter","display_name":"Digital fingerprinting for identifying malicious collusive groups on Twitter","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4385733861","doi":"https://doi.org/10.1093/cybsec/tyad014"},"language":"en","primary_location":{"id":"doi:10.1093/cybsec/tyad014","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyad014","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/9/1/tyad014/51084262/tyad014.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://academic.oup.com/cybersecurity/article-pdf/9/1/tyad014/51084262/tyad014.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084794097","display_name":"Ruth Ikwu","orcid":"https://orcid.org/0000-0002-1700-293X"},"institutions":[{"id":"https://openalex.org/I79510175","display_name":"Cardiff University","ror":"https://ror.org/03kk7td41","country_code":"GB","type":"education","lineage":["https://openalex.org/I79510175"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ruth Ikwu","raw_affiliation_strings":["School of Social Sciences, Cardiff University , Cardiff CF10 3WT , UK"],"raw_orcid":"https://orcid.org/0000-0002-1700-293X","affiliations":[{"raw_affiliation_string":"School of Social Sciences, Cardiff University , Cardiff CF10 3WT , UK","institution_ids":["https://openalex.org/I79510175"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052419350","display_name":"Luca Giommoni","orcid":"https://orcid.org/0000-0002-3127-654X"},"institutions":[{"id":"https://openalex.org/I79510175","display_name":"Cardiff University","ror":"https://ror.org/03kk7td41","country_code":"GB","type":"education","lineage":["https://openalex.org/I79510175"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Luca Giommoni","raw_affiliation_strings":["School of Social Sciences, Cardiff University , Cardiff CF10 3WT , UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Social Sciences, Cardiff University , Cardiff CF10 3WT , UK","institution_ids":["https://openalex.org/I79510175"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065308354","display_name":"Amir Javed","orcid":"https://orcid.org/0000-0001-9761-0945"},"institutions":[{"id":"https://openalex.org/I79510175","display_name":"Cardiff University","ror":"https://ror.org/03kk7td41","country_code":"GB","type":"education","lineage":["https://openalex.org/I79510175"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Amir Javed","raw_affiliation_strings":["School of Computer Science and Informatics, Cardiff University , CF24 4AG , UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Informatics, Cardiff University , CF24 4AG , UK","institution_ids":["https://openalex.org/I79510175"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090436792","display_name":"Pete Burnap","orcid":"https://orcid.org/0000-0003-0396-633X"},"institutions":[{"id":"https://openalex.org/I79510175","display_name":"Cardiff University","ror":"https://ror.org/03kk7td41","country_code":"GB","type":"education","lineage":["https://openalex.org/I79510175"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Pete Burnap","raw_affiliation_strings":["School of Computer Science and Informatics, Cardiff University , CF24 4AG , UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Informatics, Cardiff University , CF24 4AG , UK","institution_ids":["https://openalex.org/I79510175"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032832551","display_name":"Matthew Williams","orcid":"https://orcid.org/0000-0003-2566-6063"},"institutions":[{"id":"https://openalex.org/I79510175","display_name":"Cardiff University","ror":"https://ror.org/03kk7td41","country_code":"GB","type":"education","lineage":["https://openalex.org/I79510175"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Matthew Williams","raw_affiliation_strings":["School of Social Sciences, Cardiff University , Cardiff CF10 3WT , UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Social Sciences, Cardiff University , Cardiff CF10 3WT , UK","institution_ids":["https://openalex.org/I79510175"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I79510175"],"apc_list":{"value":1864,"currency":"USD","value_usd":1864},"apc_paid":{"value":1864,"currency":"USD","value_usd":1864},"fwci":2.1364,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.89899878,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"9","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.727130651473999},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6993422508239746},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6677042245864868},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.6585865020751953},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6486565470695496},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6349793076515198},{"id":"https://openalex.org/keywords/anonymity","display_name":"Anonymity","score":0.5952193737030029},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5478654503822327},{"id":"https://openalex.org/keywords/blacklisting","display_name":"Blacklisting","score":0.5103790163993835},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.496218740940094},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.4742250144481659},{"id":"https://openalex.org/keywords/zombie","display_name":"Zombie","score":0.4212539792060852},{"id":"https://openalex.org/keywords/persona","display_name":"Persona","score":0.4182385504245758},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.38373738527297974},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.36131370067596436},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.13980692625045776},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.13005751371383667}],"concepts":[{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.727130651473999},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6993422508239746},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6677042245864868},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.6585865020751953},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6486565470695496},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6349793076515198},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.5952193737030029},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5478654503822327},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.5103790163993835},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.496218740940094},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.4742250144481659},{"id":"https://openalex.org/C144446859","wikidata":"https://www.wikidata.org/wiki/Q219164","display_name":"Zombie","level":2,"score":0.4212539792060852},{"id":"https://openalex.org/C313442","wikidata":"https://www.wikidata.org/wiki/Q778556","display_name":"Persona","level":2,"score":0.4182385504245758},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.38373738527297974},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.36131370067596436},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.13980692625045776},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13005751371383667},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1093/cybsec/tyad014","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyad014","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/9/1/tyad014/51084262/tyad014.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:https://orca.cardiff.ac.uk:161728","is_oa":true,"landing_page_url":null,"pdf_url":"https://orca.cardiff.ac.uk/id/eprint/161728/7/tyad014.pdf","source":{"id":"https://openalex.org/S4306401195","display_name":"ORCA Online Research @Cardiff (Cardiff University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79510175","host_organization_name":"Cardiff University","host_organization_lineage":["https://openalex.org/I79510175"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":{"id":"doi:10.1093/cybsec/tyad014","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyad014","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/9/1/tyad014/51084262/tyad014.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7599999904632568}],"awards":[{"id":"https://openalex.org/G5270794459","display_name":"How Online Technologies are Transforming Transnational Organised Crime (Cyber-TNOC)","funder_award_id":"ES/S008853/1","funder_id":"https://openalex.org/F4320334630","funder_display_name":"Economic and Social Research Council"},{"id":"https://openalex.org/G6254341031","display_name":null,"funder_award_id":"ES/S008853/1","funder_id":"https://openalex.org/F4320334630","funder_display_name":"Economic and Social Research Council"},{"id":"https://openalex.org/G7846730872","display_name":null,"funder_award_id":"EP/S018263/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"},{"id":"https://openalex.org/F4320334630","display_name":"Economic and Social Research Council","ror":"https://ror.org/03n0ht308"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4385733861.pdf"},"referenced_works_count":69,"referenced_works":["https://openalex.org/W1505580166","https://openalex.org/W1598029732","https://openalex.org/W1935594107","https://openalex.org/W1967425545","https://openalex.org/W1969701495","https://openalex.org/W2011722134","https://openalex.org/W2019759670","https://openalex.org/W2023041527","https://openalex.org/W2047133149","https://openalex.org/W2052427829","https://openalex.org/W2084591134","https://openalex.org/W2092755023","https://openalex.org/W2099366530","https://openalex.org/W2129011250","https://openalex.org/W2133564696","https://openalex.org/W2136525955","https://openalex.org/W2138919872","https://openalex.org/W2189625117","https://openalex.org/W2268263349","https://openalex.org/W2415811790","https://openalex.org/W2418848579","https://openalex.org/W2474494813","https://openalex.org/W2528837208","https://openalex.org/W2535218596","https://openalex.org/W2559689130","https://openalex.org/W2591744545","https://openalex.org/W2604283646","https://openalex.org/W2791506524","https://openalex.org/W2809692089","https://openalex.org/W2896959978","https://openalex.org/W2913157426","https://openalex.org/W2947381283","https://openalex.org/W2955728628","https://openalex.org/W2978381397","https://openalex.org/W2989925259","https://openalex.org/W2990412241","https://openalex.org/W3046569080","https://openalex.org/W3049537026","https://openalex.org/W3080759852","https://openalex.org/W3091924507","https://openalex.org/W3193423645","https://openalex.org/W4239390094","https://openalex.org/W4252719892","https://openalex.org/W4293678437","https://openalex.org/W4294969751","https://openalex.org/W6630844130","https://openalex.org/W6635931342","https://openalex.org/W6637163108","https://openalex.org/W6640419471","https://openalex.org/W6644946663","https://openalex.org/W6678141475","https://openalex.org/W6679434410","https://openalex.org/W6686980507","https://openalex.org/W6693353537","https://openalex.org/W6698106105","https://openalex.org/W6704314547","https://openalex.org/W6728537998","https://openalex.org/W6732691979","https://openalex.org/W6738623534","https://openalex.org/W6741796869","https://openalex.org/W6742708311","https://openalex.org/W6753484649","https://openalex.org/W6754397763","https://openalex.org/W6770630168","https://openalex.org/W6793928843","https://openalex.org/W6799912341","https://openalex.org/W6839907384","https://openalex.org/W6999213386","https://openalex.org/W7043302486"],"related_works":["https://openalex.org/W4281884841","https://openalex.org/W2933056782","https://openalex.org/W2012481173","https://openalex.org/W2043034431","https://openalex.org/W1593211785","https://openalex.org/W2139572494","https://openalex.org/W3033830493","https://openalex.org/W2103528115","https://openalex.org/W3207470445","https://openalex.org/W3215769141"],"abstract_inverted_index":{"Abstract":[0],"Propagation":[1],"of":[2,18,41,55,104,120,144,181,198,224,241,250],"malicious":[3,19,59,67,75,80,127,136,156,173,182],"code":[4],"on":[5,108,129,134,158,185,202,220,229],"online":[6,24,146],"social":[7],"networks":[8],"(OSNs)":[9],"is":[10,96],"often":[11],"a":[12,113,164,168,199,221,253],"coordinated":[13],"effort":[14],"by":[15,212],"collusive":[16,208,246],"groups":[17,91,119,228],"actors":[20,122,183],"hiding":[21],"behind":[22],"multiple":[23],"identities":[25],"(or":[26],"digital":[27,106,169,188,204,236],"personas).":[28],"Increased":[29],"interaction":[30,63],"in":[31,69,154,210,245,252],"OSN":[32,70,159,174,203,211],"has":[33],"made":[34],"them":[35],"reliable":[36],"for":[37,115,171],"the":[38,89,100,196],"efficient":[39],"orchestration":[40],"cyberattacks":[42],"such":[43,56,65,117],"as":[44,138],"phishing":[45],"click":[46],"bait":[47],"and":[48,61,102,142,161,217,248],"drive-by":[49],"downloads.":[50],"URL":[51],"shortening":[52],"enables":[53],"obfuscation":[54],"links":[57,68,76,128,157],"to":[58,79,93,99,125,166,190,206],"websites":[60],"massive":[62],"with":[64],"embedded":[66],"guarantees":[71],"maximum":[72],"reach.":[73],"These":[74],"lure":[77],"users":[78,137,152],"endpoints":[81],"where":[82],"attackers":[83],"can":[84,238],"exploit":[85],"system":[86],"vulnerabilities.":[87],"Identifying":[88],"organized":[90,118],"colluding":[92,227],"spread":[94,126],"malware":[95],"non-trivial":[97],"owing":[98],"fluidity":[101],"anonymity":[103],"criminal":[105,121,140],"personas":[107,243],"OSN.":[109,130],"This":[110],"paper":[111],"proposes":[112],"methodology":[114,165],"identifying":[116],"working":[123],"together":[124],"Our":[131,231],"approach":[132,201],"focuses":[133],"understanding":[135],"\u2018digital":[139],"personas\u2019":[141],"characteristics":[143],"their":[145],"existence.":[147],"We":[148,177,194],"first":[149],"identify":[150,207,239],"those":[151],"engaged":[153,244],"propagating":[155],"platforms,":[160],"further":[162],"develop":[163],"create":[167,178],"fingerprint":[170],"each":[172],"account/digital":[175],"persona.":[176],"similarity":[179,215],"clusters":[180],"based":[184],"these":[186],"unique":[187],"fingerprints":[189,237],"establish":[191],"\u2018collusive\u2019":[192],"behaviour.":[193],"evaluate":[195],"ability":[197],"cluster-based":[200],"fingerprinting":[205],"behaviour":[209,247],"estimating":[213],"within-cluster":[214],"measures":[216],"testing":[218],"it":[219],"ground-truth":[222],"dataset":[223],"five":[225],"known":[226],"Twitter.":[230],"results":[232],"show":[233],"that":[234],"our":[235],"90%":[240],"cyber":[242],"75%":[249],"collusion":[251],"given":[254],"sample":[255],"set.":[256]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}