{"id":"https://openalex.org/W2186122652","doi":"https://doi.org/10.1109/cns.2015.7346813","title":"Boten ELISA: A novel approach for botnet C&amp;C in Online Social Networks","display_name":"Boten ELISA: A novel approach for botnet C&amp;C in Online Social Networks","publication_year":2015,"publication_date":"2015-09-01","ids":{"openalex":"https://openalex.org/W2186122652","doi":"https://doi.org/10.1109/cns.2015.7346813","mag":"2186122652"},"language":"en","primary_location":{"id":"doi:10.1109/cns.2015.7346813","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2015.7346813","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://www.openaccessrepository.it/record/55098","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015900248","display_name":"Alberto Compagno","orcid":"https://orcid.org/0000-0002-1454-3255"},"institutions":[{"id":"https://openalex.org/I861853513","display_name":"Sapienza University of Rome","ror":"https://ror.org/02be6w209","country_code":"IT","type":"education","lineage":["https://openalex.org/I861853513"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alberto Compagno","raw_affiliation_strings":["Department of Computer Science, Sapienza University of Rome, Rome, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Sapienza University of Rome, Rome, Italy","institution_ids":["https://openalex.org/I861853513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063847107","display_name":"Mauro Conti","orcid":"https://orcid.org/0000-0002-3612-1934"},"institutions":[{"id":"https://openalex.org/I138689650","display_name":"University of Padua","ror":"https://ror.org/00240q980","country_code":"IT","type":"education","lineage":["https://openalex.org/I138689650"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mauro Conti","raw_affiliation_strings":["Departrnent of Mathematics, University of Padua, Padua, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Departrnent of Mathematics, University of Padua, Padua, Italy","institution_ids":["https://openalex.org/I138689650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031443144","display_name":"Daniele Lain","orcid":"https://orcid.org/0000-0001-6101-7306"},"institutions":[{"id":"https://openalex.org/I138689650","display_name":"University of Padua","ror":"https://ror.org/00240q980","country_code":"IT","type":"education","lineage":["https://openalex.org/I138689650"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Daniele Lain","raw_affiliation_strings":["Departrnent of Mathematics, University of Padua, Padua, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Departrnent of Mathematics, University of Padua, Padua, Italy","institution_ids":["https://openalex.org/I138689650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005705199","display_name":"Giulio Lovisotto","orcid":"https://orcid.org/0000-0002-0517-4443"},"institutions":[{"id":"https://openalex.org/I138689650","display_name":"University of Padua","ror":"https://ror.org/00240q980","country_code":"IT","type":"education","lineage":["https://openalex.org/I138689650"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giulio Lovisotto","raw_affiliation_strings":["Departrnent of Mathematics, University of Padua, Padua, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Departrnent of Mathematics, University of Padua, Padua, Italy","institution_ids":["https://openalex.org/I138689650"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046905749","display_name":"Luigi V. Mancini","orcid":"https://orcid.org/0000-0003-4859-2191"},"institutions":[{"id":"https://openalex.org/I861853513","display_name":"Sapienza University of Rome","ror":"https://ror.org/02be6w209","country_code":"IT","type":"education","lineage":["https://openalex.org/I861853513"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Luigi Vincenzo Mancini","raw_affiliation_strings":["Department of Computer Science, Sapienza University of Rome, Rome, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Sapienza University of Rome, Rome, Italy","institution_ids":["https://openalex.org/I861853513"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0589,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.75148125,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"74","last_page":"82"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9673892855644226},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7861455678939819},{"id":"https://openalex.org/keywords/blacklisting","display_name":"Blacklisting","score":0.7259168028831482},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6776598691940308},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6000338792800903},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4856397211551666},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4796362519264221},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.44106072187423706},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.43355563282966614},{"id":"https://openalex.org/keywords/relay","display_name":"Relay","score":0.4163808226585388},{"id":"https://openalex.org/keywords/command-and-control","display_name":"Command and control","score":0.41556018590927124},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.41286394000053406},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3307945430278778},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.32877880334854126},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.14649194478988647}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9673892855644226},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7861455678939819},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.7259168028831482},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6776598691940308},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6000338792800903},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4856397211551666},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4796362519264221},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.44106072187423706},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.43355563282966614},{"id":"https://openalex.org/C2778156585","wikidata":"https://www.wikidata.org/wiki/Q174053","display_name":"Relay","level":3,"score":0.4163808226585388},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.41556018590927124},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.41286394000053406},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3307945430278778},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.32877880334854126},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.14649194478988647},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/cns.2015.7346813","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2015.7346813","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},{"id":"pmh:oai:iris.uniroma1.it:11573/855312.1","is_oa":false,"landing_page_url":"http://hdl.handle.net/11573/855312","pdf_url":null,"source":{"id":"https://openalex.org/S4377196107","display_name":"IRIS Research product catalog (Sapienza University of Rome)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:iris.uniroma1.it:11573/878039","is_oa":false,"landing_page_url":"http://hdl.handle.net/11573/878039","pdf_url":null,"source":{"id":"https://openalex.org/S4377196107","display_name":"IRIS Research product catalog (Sapienza University of Rome)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:www.research.unipd.it:11577/3169213","is_oa":false,"landing_page_url":"http://hdl.handle.net/11577/3169213","pdf_url":null,"source":{"id":"https://openalex.org/S4306402547","display_name":"Padua Research Archive (University of Padova)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I138689650","host_organization_name":"University of Padua","host_organization_lineage":["https://openalex.org/I138689650"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:zenodo.org:55098","is_oa":true,"landing_page_url":"https://www.openaccessrepository.it/record/55098","pdf_url":null,"source":{"id":"https://openalex.org/S4306402478","display_name":"INFM-OAR (INFN Catania)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210116497","host_organization_name":"Istituto Nazionale di Fisica Nucleare, Sezione di Catania","host_organization_lineage":["https://openalex.org/I4210116497"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Conference on Communications and Network Security (CNS), 2015, Florence, Italy, 28-30 September 2015","raw_type":"info:eu-repo/semantics/conferencePaper"}],"best_oa_location":{"id":"pmh:oai:zenodo.org:55098","is_oa":true,"landing_page_url":"https://www.openaccessrepository.it/record/55098","pdf_url":null,"source":{"id":"https://openalex.org/S4306402478","display_name":"INFM-OAR (INFN Catania)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210116497","host_organization_name":"Istituto Nazionale di Fisica Nucleare, Sezione di Catania","host_organization_lineage":["https://openalex.org/I4210116497"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Conference on Communications and Network Security (CNS), 2015, Florence, Italy, 28-30 September 2015","raw_type":"info:eu-repo/semantics/conferencePaper"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.41999998688697815}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W191098608","https://openalex.org/W239671278","https://openalex.org/W1497347928","https://openalex.org/W1571874655","https://openalex.org/W1594972289","https://openalex.org/W1654194294","https://openalex.org/W1676351273","https://openalex.org/W1688725932","https://openalex.org/W1775772884","https://openalex.org/W1979706594","https://openalex.org/W1979818385","https://openalex.org/W1985749074","https://openalex.org/W1991492503","https://openalex.org/W1992713826","https://openalex.org/W1994344180","https://openalex.org/W2000408784","https://openalex.org/W2015011636","https://openalex.org/W2024488400","https://openalex.org/W2025126522","https://openalex.org/W2033775679","https://openalex.org/W2034279876","https://openalex.org/W2047443612","https://openalex.org/W2050054241","https://openalex.org/W2054731191","https://openalex.org/W2060108852","https://openalex.org/W2064494041","https://openalex.org/W2065323196","https://openalex.org/W2065769502","https://openalex.org/W2091614396","https://openalex.org/W2098192428","https://openalex.org/W2102814211","https://openalex.org/W2110675786","https://openalex.org/W2114996745","https://openalex.org/W2122941797","https://openalex.org/W2130216882","https://openalex.org/W2153204928","https://openalex.org/W2157949690","https://openalex.org/W2159753392","https://openalex.org/W2160455917","https://openalex.org/W2187451837","https://openalex.org/W2963391911","https://openalex.org/W3103071483","https://openalex.org/W6607784307","https://openalex.org/W6629899833","https://openalex.org/W6634481199","https://openalex.org/W6635614179","https://openalex.org/W6637185674","https://openalex.org/W6637214718","https://openalex.org/W6637520226","https://openalex.org/W6638021444","https://openalex.org/W6686943643"],"related_works":["https://openalex.org/W1979706594","https://openalex.org/W86804927","https://openalex.org/W2898126008","https://openalex.org/W1583098994","https://openalex.org/W2386447999","https://openalex.org/W2130216882","https://openalex.org/W2091214382","https://openalex.org/W2376288852","https://openalex.org/W2100671106","https://openalex.org/W2364035342"],"abstract_inverted_index":{"The":[0],"Command":[1],"and":[2,24,42,140],"Control":[3],"(C&C)":[4],"channel":[5],"of":[6,96,121,138,157,163,170,193],"modern":[7],"botnets":[8,173,194],"is":[9,66],"migrating":[10],"from":[11],"traditional":[12],"centralized":[13,76],"solutions":[14],"(such":[15],"as":[16],"the":[17,107,113,161],"ones":[18],"based":[19],"on":[20],"Internet":[21],"Relay":[22],"Chat":[23],"Hyper":[25],"Text":[26],"Transfer":[27],"Protocol),":[28],"towards":[29],"new":[30,191],"decentralized":[31],"approaches.":[32],"As":[33],"an":[34],"example,":[35],"in":[36,74,103,188],"order":[37],"to":[38,134,178,197],"conceal":[39],"their":[40],"traffic":[41,145],"avoid":[43],"blacklisting":[44],"mechanisms,":[45],"recent":[46],"C&C":[47,91,180],"channels":[48],"use":[49,175],"peer-to-peer":[50],"networks":[51,129],"or":[52],"abuse":[53],"popular":[54,127],"Online":[55],"Social":[56,85],"Networks":[57],"(OSNs).":[58],"A":[59],"key":[60],"reason":[61],"for":[62],"this":[63,79,136],"paradigm":[64],"shift":[65],"that":[67,89,109,125,159,174,185],"current":[68,144],"detection":[69],"systems":[70,147],"become":[71],"quite":[72],"effective":[73],"detecting":[75],"C&C.":[77],"In":[78,99],"paper":[80],"we":[81,116,141,152,183],"propose":[82],"ELISA":[83,101],"(Elusive":[84],"Army),":[86],"a":[87,104,154],"botnet":[88],"conceals":[90],"information":[92],"using":[93],"OSNs":[94],"accounts":[95],"unaware":[97],"users.":[98],"particular,":[100],"exploits":[102],"opportunistic":[105],"way":[106],"messages":[108],"users":[110],"exchange":[111],"through":[112],"OSN.":[114],"Furthermore,":[115],"provide":[117],"our":[118,164,176],"prototype":[119],"implementation":[120],"ELISA.":[122,150],"We":[123,166],"show":[124],"several":[126],"social":[128],"can":[130],"be":[131],"maliciously":[132],"exploited":[133],"run":[135,153],"type":[137],"botnet,":[139],"discuss":[142],"why":[143],"analysis":[146],"cannot":[148],"detect":[149],"Finally,":[151],"thorough":[155],"set":[156],"experiments":[158],"confirm":[160],"feasibility":[162],"proposal.":[165],"have":[167],"no":[168],"evidence":[169],"any":[171],"real-world":[172],"technique":[177],"create":[179],"channels.":[181],"However,":[182],"believe":[184],"finding":[186],"out":[187],"advance":[189],"potential":[190],"types":[192],"will":[195],"help":[196],"prevent":[198],"possible":[199],"future":[200],"malevolent":[201],"applications.":[202]},"counts_by_year":[{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
