{"id":"https://openalex.org/W4386321874","doi":"https://doi.org/10.1109/access.2023.3310810","title":"Using Clustering Algorithms to Automatically Identify Phishing Campaigns","display_name":"Using Clustering Algorithms to Automatically Identify Phishing Campaigns","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4386321874","doi":"https://doi.org/10.1109/access.2023.3310810"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3310810","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3310810","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10235951.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10235951.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067988533","display_name":"Kholoud Althobaiti","orcid":"https://orcid.org/0000-0002-7299-7095"},"institutions":[{"id":"https://openalex.org/I179331831","display_name":"Taif University","ror":"https://ror.org/014g1a453","country_code":"SA","type":"education","lineage":["https://openalex.org/I179331831"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Kholoud Althobaiti","raw_affiliation_strings":["Department of Computer Science, Taif University, Taif, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-7299-7095","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Taif University, Taif, Saudi Arabia","institution_ids":["https://openalex.org/I179331831"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069675691","display_name":"Maria Wolters","orcid":"https://orcid.org/0000-0002-3369-3558"},"institutions":[{"id":"https://openalex.org/I98677209","display_name":"University of Edinburgh","ror":"https://ror.org/01nrxwf90","country_code":"GB","type":"education","lineage":["https://openalex.org/I98677209"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Maria K. Wolters","raw_affiliation_strings":["School of Informatics, The University of Edinburgh, Edinburgh, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Informatics, The University of Edinburgh, Edinburgh, U.K","institution_ids":["https://openalex.org/I98677209"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015952754","display_name":"Nawal Alsufyani","orcid":"https://orcid.org/0000-0002-0524-1132"},"institutions":[{"id":"https://openalex.org/I179331831","display_name":"Taif University","ror":"https://ror.org/014g1a453","country_code":"SA","type":"education","lineage":["https://openalex.org/I179331831"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Nawal Alsufyani","raw_affiliation_strings":["Department of Computer Science, Taif University, Taif, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Taif University, Taif, Saudi Arabia","institution_ids":["https://openalex.org/I179331831"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082266410","display_name":"Kami Vaniea","orcid":"https://orcid.org/0000-0001-8042-3342"},"institutions":[{"id":"https://openalex.org/I98677209","display_name":"University of Edinburgh","ror":"https://ror.org/01nrxwf90","country_code":"GB","type":"education","lineage":["https://openalex.org/I98677209"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Kami Vaniea","raw_affiliation_strings":["School of Informatics, The University of Edinburgh, Edinburgh, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Informatics, The University of Edinburgh, Edinburgh, U.K","institution_ids":["https://openalex.org/I98677209"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5067988533"],"corresponding_institution_ids":["https://openalex.org/I179331831"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":4.4428,"has_fulltext":true,"cited_by_count":10,"citation_normalized_percentile":{"value":0.95002806,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"11","issue":null,"first_page":"96502","last_page":"96513"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.8800584077835083},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.815502405166626},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.7585304975509644},{"id":"https://openalex.org/keywords/dbscan","display_name":"DBSCAN","score":0.722082257270813},{"id":"https://openalex.org/keywords/silhouette","display_name":"Silhouette","score":0.604843020439148},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.44979169964790344},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.43575847148895264},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3452083170413971},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.31302446126937866},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.26613688468933105},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.1954875886440277},{"id":"https://openalex.org/keywords/fuzzy-clustering","display_name":"Fuzzy clustering","score":0.1509450376033783}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.8800584077835083},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.815502405166626},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.7585304975509644},{"id":"https://openalex.org/C46576248","wikidata":"https://www.wikidata.org/wiki/Q1114630","display_name":"DBSCAN","level":5,"score":0.722082257270813},{"id":"https://openalex.org/C58103923","wikidata":"https://www.wikidata.org/wiki/Q2286025","display_name":"Silhouette","level":2,"score":0.604843020439148},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.44979169964790344},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43575847148895264},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3452083170413971},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.31302446126937866},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.26613688468933105},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.1954875886440277},{"id":"https://openalex.org/C17212007","wikidata":"https://www.wikidata.org/wiki/Q5511111","display_name":"Fuzzy clustering","level":3,"score":0.1509450376033783},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C104047586","wikidata":"https://www.wikidata.org/wiki/Q5033439","display_name":"Canopy clustering algorithm","level":4,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2023.3310810","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3310810","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10235951.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:pure.ed.ac.uk:openaire/64494e6f-9f0b-4f50-8a41-eb60dfbd89ca","is_oa":true,"landing_page_url":"https://www.research.ed.ac.uk/en/publications/64494e6f-9f0b-4f50-8a41-eb60dfbd89ca","pdf_url":null,"source":{"id":"https://openalex.org/S4406922455","display_name":"Edinburgh Research Explorer","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Althobaiti, K, Vaniea, K, Wolters, M K & Alsufyani, N 2023, 'Using Clustering Algorithms to Automatically Identify Phishing Campaigns', IEEE Access, vol. 11, 10235951, pp. 96502-96513. https://doi.org/10.1109/ACCESS.2023.3310810","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:doaj.org/article:39e92ee67f584374ae1c7ed20e898e94","is_oa":true,"landing_page_url":"https://doaj.org/article/39e92ee67f584374ae1c7ed20e898e94","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 96502-96513 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3310810","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3310810","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10235951.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320332","display_name":"University of Edinburgh","ror":"https://ror.org/01nrxwf90"},{"id":"https://openalex.org/F4320323722","display_name":"Taif University","ror":"https://ror.org/014g1a453"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4386321874.pdf","grobid_xml":"https://content.openalex.org/works/W4386321874.grobid-xml"},"referenced_works_count":59,"referenced_works":["https://openalex.org/W1525618747","https://openalex.org/W1567605630","https://openalex.org/W1621268071","https://openalex.org/W1673310716","https://openalex.org/W1922136771","https://openalex.org/W1965586806","https://openalex.org/W1965961515","https://openalex.org/W1983317944","https://openalex.org/W1988453576","https://openalex.org/W1998155142","https://openalex.org/W2007209062","https://openalex.org/W2024711043","https://openalex.org/W2031999883","https://openalex.org/W2036225462","https://openalex.org/W2065832360","https://openalex.org/W2067191022","https://openalex.org/W2068185042","https://openalex.org/W2070840891","https://openalex.org/W2074415236","https://openalex.org/W2078444243","https://openalex.org/W2091534410","https://openalex.org/W2101234009","https://openalex.org/W2113429362","https://openalex.org/W2113449956","https://openalex.org/W2120575289","https://openalex.org/W2133339942","https://openalex.org/W2134750673","https://openalex.org/W2143085547","https://openalex.org/W2146260191","https://openalex.org/W2158850909","https://openalex.org/W2293085137","https://openalex.org/W2488334223","https://openalex.org/W2523770745","https://openalex.org/W2570712227","https://openalex.org/W2586495638","https://openalex.org/W2587201320","https://openalex.org/W2740924709","https://openalex.org/W2766363223","https://openalex.org/W2893240802","https://openalex.org/W2915446580","https://openalex.org/W2944554782","https://openalex.org/W2946254251","https://openalex.org/W2964046818","https://openalex.org/W2986291326","https://openalex.org/W2991305957","https://openalex.org/W2997822280","https://openalex.org/W3003583062","https://openalex.org/W3006834142","https://openalex.org/W3155193104","https://openalex.org/W3200431970","https://openalex.org/W3207647981","https://openalex.org/W4210621942","https://openalex.org/W6631537121","https://openalex.org/W6637131181","https://openalex.org/W6675354045","https://openalex.org/W6677151732","https://openalex.org/W6696796857","https://openalex.org/W6731564061","https://openalex.org/W6738935950"],"related_works":["https://openalex.org/W1622964048","https://openalex.org/W30315714","https://openalex.org/W1906975550","https://openalex.org/W1965274140","https://openalex.org/W4298287039","https://openalex.org/W3176449234","https://openalex.org/W2767235736","https://openalex.org/W2045002201","https://openalex.org/W4225278791","https://openalex.org/W4322502698"],"abstract_inverted_index":{"Attackers":[0],"attempt":[1],"to":[2,37,49,92,148],"create":[3],"successful":[4],"phishing":[5,79],"campaigns":[6,69,96],"by":[7],"sending":[8],"out":[9],"trustworthy-looking":[10],"emails":[11,52,67,94],"with":[12,70,112,121,135],"a":[13,145,158],"range":[14],"of":[15,58,73,88],"variations,":[16],"such":[17],"as":[18,102],"adding":[19],"the":[20,24,45,71,86,119,122],"recipient":[21],"name":[22],"in":[23,30],"subject":[25],"line":[26],"or":[27],"changing":[28],"URLs":[29,139],"email":[31,136],"body.":[32],"These":[33],"tactics":[34],"are":[35,56],"used":[36],"bypass":[38],"filters":[39],"and":[40,109,125,128,138,153],"make":[41],"it":[42],"difficult":[43],"for":[44,161],"information":[46],"system":[47],"teams":[48],"block":[50],"all":[51],"even":[53],"when":[54],"they":[55],"aware":[57],"an":[59],"ongoing":[60],"attack.":[61],"Little":[62],"is":[63,157],"done":[64],"about":[65],"grouping":[66],"into":[68,95],"goal":[72],"better":[74],"supporting":[75],"staff":[76,99],"who":[77],"mitigate":[78],"using":[80,89],"reported":[81],"phishing.":[82],"This":[83],"paper":[84],"explores":[85],"feasibility":[87],"clustering":[90,151,156],"algorithms":[91,111],"group":[93],"that":[97,130,155],"IT":[98],"would":[100],"interpret":[101],"being":[103],"similar.":[104],"First,":[105],"we":[106,117],"applied":[107],"Meanshift":[108],"DBSCAN":[110,134],"seven":[113],"feature":[114],"sets.":[115],"Then,":[116],"evaluated":[118],"solutions":[120],"Silhouette":[123],"coefficient":[124],"homogeneity":[126],"score":[127],"find":[129,154],"Mean":[131],"Shift":[132],"outperforms":[133],"origin":[137],"based":[140],"features.":[141],"We":[142],"then":[143],"run":[144],"user":[146],"study":[147],"validate":[149],"our":[150],"solution":[152],"promising":[159],"approach":[160],"campaign":[162],"identification.":[163]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":4}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}