{"id":"https://openalex.org/W2188725950","doi":"https://doi.org/10.1109/cns.2015.7346841","title":"Characterizing phishing threats with Natural Language Processing","display_name":"Characterizing phishing threats with Natural Language Processing","publication_year":2015,"publication_date":"2015-09-01","ids":{"openalex":"https://openalex.org/W2188725950","doi":"https://doi.org/10.1109/cns.2015.7346841","mag":"2188725950"},"language":"en","primary_location":{"id":"doi:10.1109/cns.2015.7346841","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2015.7346841","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047302063","display_name":"Michael C. Kotson","orcid":"https://orcid.org/0000-0003-1058-4313"},"institutions":[{"id":"https://openalex.org/I4210122954","display_name":"MIT Lincoln Laboratory","ror":"https://ror.org/022z6jk58","country_code":"US","type":"facility","lineage":["https://openalex.org/I4210122954","https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael C. Kotson","raw_affiliation_strings":["MIT Lincoln Laboratory, Lexington, MA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MIT Lincoln Laboratory, Lexington, MA","institution_ids":["https://openalex.org/I4210122954"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076096528","display_name":"Alexia Schulz","orcid":null},"institutions":[{"id":"https://openalex.org/I4210122954","display_name":"MIT Lincoln Laboratory","ror":"https://ror.org/022z6jk58","country_code":"US","type":"facility","lineage":["https://openalex.org/I4210122954","https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alexia Schulz","raw_affiliation_strings":["MIT Lincoln Laboratory, Lexington, MA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MIT Lincoln Laboratory, Lexington, MA","institution_ids":["https://openalex.org/I4210122954"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210122954"],"apc_list":null,"apc_paid":null,"fwci":1.648,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.88560671,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"308","last_page":"316"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.9487987160682678},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7386703491210938},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6390115022659302},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5054738521575928},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.49965596199035645},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4428769648075104},{"id":"https://openalex.org/keywords/institution","display_name":"Institution","score":0.4296116530895233},{"id":"https://openalex.org/keywords/demographics","display_name":"Demographics","score":0.42232292890548706},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3109111189842224}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.9487987160682678},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7386703491210938},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6390115022659302},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5054738521575928},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.49965596199035645},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4428769648075104},{"id":"https://openalex.org/C2780510313","wikidata":"https://www.wikidata.org/wiki/Q178706","display_name":"Institution","level":2,"score":0.4296116530895233},{"id":"https://openalex.org/C2780084366","wikidata":"https://www.wikidata.org/wiki/Q37732","display_name":"Demographics","level":2,"score":0.42232292890548706},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3109111189842224},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C149923435","wikidata":"https://www.wikidata.org/wiki/Q37732","display_name":"Demography","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cns.2015.7346841","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2015.7346841","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Quality Education","score":0.7099999785423279,"id":"https://metadata.un.org/sdg/4"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W293130828","https://openalex.org/W755860182","https://openalex.org/W1738124305","https://openalex.org/W1956559956","https://openalex.org/W1978394996","https://openalex.org/W1996660070","https://openalex.org/W2070840891","https://openalex.org/W2101234009","https://openalex.org/W2127209084","https://openalex.org/W2147152072","https://openalex.org/W2165612380","https://openalex.org/W2273178034","https://openalex.org/W2325227998","https://openalex.org/W6610515744","https://openalex.org/W6637879989","https://openalex.org/W6640862754","https://openalex.org/W6675354045","https://openalex.org/W6694117505"],"related_works":["https://openalex.org/W2149202530","https://openalex.org/W2807822918","https://openalex.org/W2921723332","https://openalex.org/W2482950156","https://openalex.org/W4396966040","https://openalex.org/W2305322260","https://openalex.org/W3139248031","https://openalex.org/W3042334625","https://openalex.org/W4200017362","https://openalex.org/W4388020458"],"abstract_inverted_index":{"Spear":[0,29],"phishing":[1,27,30,70,80,83],"is":[2,24],"a":[3,49,67,77,93,97,109,126,168],"widespread":[4],"concern":[5],"in":[6],"the":[7,19,34,37,131,136,150,172],"modern":[8],"network":[9],"security":[10],"landscape,":[11],"but":[12],"there":[13],"are":[14,177],"few":[15],"metrics":[16],"that":[17,75,149,164,176,188],"measure":[18],"extent":[20],"to":[21,65,105,117],"which":[22],"reconnaissance":[23],"performed":[25],"on":[26,40],"targets.":[28],"emails":[31,89],"closely":[32],"match":[33],"expectations":[35],"of":[36,42,171],"recipient,":[38],"based":[39],"details":[41],"their":[43],"experiences":[44],"and":[45,72,96,135],"interests,":[46],"making":[47],"them":[48],"popular":[50],"propagation":[51],"vector":[52],"for":[53],"harmful":[54],"malware.":[55],"In":[56],"this":[57,184],"work":[58],"we":[59,140],"use":[60],"Natural":[61],"Language":[62],"Processing":[63],"techniques":[64],"investigate":[66],"specific":[68,120],"real-world":[69],"campaign":[71,84,114,173,185],"quantify":[73],"attributes":[74],"indicate":[76],"targeted":[78,153],"spear":[79],"attack.":[81],"Our":[82],"data":[85],"sample":[86],"comprises":[87],"596":[88],"-":[90,103],"all":[91],"containing":[92],"web":[94],"bug":[95],"Curriculum":[98],"Vitae":[99],"(CV)":[100],"PDF":[101],"attachment":[102],"sent":[104],"our":[106,123],"institution":[107],"by":[108],"foreign":[110],"IP":[111],"space.":[112],"The":[113],"was":[115],"found":[116],"exclusively":[118],"target":[119],"demographics":[121],"within":[122],"institution.":[124],"Performing":[125],"semantic":[127],"similarity":[128],"analysis":[129],"between":[130],"senders'":[132],"CV":[133],"attachments":[134,151],"recipients'":[137],"LinkedIn":[138],"profiles,":[139],"conclude":[141],"with":[142],"high":[143],"statistical":[144],"certainty":[145],"(p":[146],"<;":[147],"10-4)":[148],"contain":[152],"rather":[154],"than":[155],"randomly":[156],"selected":[157],"material.":[158],"Latent":[159],"Semantic":[160],"Analysis":[161],"further":[162],"demonstrates":[163],"individuals":[165],"who":[166],"were":[167],"primary":[169],"focus":[170],"received":[174],"CVs":[175],"highly":[178],"topically":[179],"clustered.":[180],"These":[181],"findings":[182],"differentiate":[183],"from":[186],"one":[187],"leverages":[189],"random":[190],"spam.":[191]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}