{"id":"https://openalex.org/W1987117885","doi":"https://doi.org/10.1109/dsn.2013.6575316","title":"Detecting malicious landing pages in Malware Distribution Networks","display_name":"Detecting malicious landing pages in Malware Distribution Networks","publication_year":2013,"publication_date":"2013-06-01","ids":{"openalex":"https://openalex.org/W1987117885","doi":"https://doi.org/10.1109/dsn.2013.6575316","mag":"1987117885"},"language":"en","primary_location":{"id":"doi:10.1109/dsn.2013.6575316","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsn.2013.6575316","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 43rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://vtechworks.lib.vt.edu/bitstreams/61100a15-3fca-410b-8ab7-024c867f8d1b/download","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100367418","display_name":"Gang Wang","orcid":"https://orcid.org/0000-0002-8910-8979"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Wang","raw_affiliation_strings":["Computer Science, University of California, Santa Barbara, Santa Barbara, CA, USA","Comput. Sci., UC Santa Barbara, Santa Barbara, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science, University of California, Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]},{"raw_affiliation_string":"Comput. Sci., UC Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059859993","display_name":"Jack W. Stokes","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jack W. Stokes","raw_affiliation_strings":["Microsoft Research, Redmond, WA, USA","[Microsoft Research,Redmond,WA,USA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[Microsoft Research,Redmond,WA,USA]","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059864632","display_name":"Cormac Herley","orcid":"https://orcid.org/0000-0001-8436-5776"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cormac Herley","raw_affiliation_strings":["Microsoft Research, Redmond, WA, USA","[Microsoft Research,Redmond,WA,USA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[Microsoft Research,Redmond,WA,USA]","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020301876","display_name":"David Felstead","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Felstead","raw_affiliation_strings":["Microsoft Corporation, Redmond, WA, USA","Microsoft Corporation Redmond,WA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Corporation, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"Microsoft Corporation Redmond,WA,USA","institution_ids":["https://openalex.org/I1290206253"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8785,"has_fulltext":true,"cited_by_count":32,"citation_normalized_percentile":{"value":0.87015251,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7618687152862549},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.666420042514801},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.5744521021842957},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5664958953857422},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5196110606193542},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.33953094482421875},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2902037501335144}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7618687152862549},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.666420042514801},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.5744521021842957},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5664958953857422},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5196110606193542},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.33953094482421875},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2902037501335144}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/dsn.2013.6575316","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsn.2013.6575316","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 43rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN)","raw_type":"proceedings-article"},{"id":"pmh:oai:vtechworks.lib.vt.edu:10919/83428","is_oa":true,"landing_page_url":"http://hdl.handle.net/10919/83428","pdf_url":"https://vtechworks.lib.vt.edu/bitstreams/61100a15-3fca-410b-8ab7-024c867f8d1b/download","source":{"id":"https://openalex.org/S4306400248","display_name":"VTechWorks (Virginia Tech)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I859038795","host_organization_name":"Virginia Tech","host_organization_lineage":["https://openalex.org/I859038795"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference proceeding"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.361.9920","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.361.9920","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://research.microsoft.com/pubs/192169/dsn2013.pdf","raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:vtechworks.lib.vt.edu:10919/83428","is_oa":true,"landing_page_url":"http://hdl.handle.net/10919/83428","pdf_url":"https://vtechworks.lib.vt.edu/bitstreams/61100a15-3fca-410b-8ab7-024c867f8d1b/download","source":{"id":"https://openalex.org/S4306400248","display_name":"VTechWorks (Virginia Tech)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I859038795","host_organization_name":"Virginia Tech","host_organization_lineage":["https://openalex.org/I859038795"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference proceeding"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7799999713897705,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W1987117885.pdf","grobid_xml":"https://content.openalex.org/works/W1987117885.grobid-xml"},"referenced_works_count":55,"referenced_works":["https://openalex.org/W40177048","https://openalex.org/W58852127","https://openalex.org/W142212369","https://openalex.org/W162156064","https://openalex.org/W1498782169","https://openalex.org/W1520941164","https://openalex.org/W1532325895","https://openalex.org/W1663973292","https://openalex.org/W1674877186","https://openalex.org/W1686420892","https://openalex.org/W1843351773","https://openalex.org/W1970867218","https://openalex.org/W1998654458","https://openalex.org/W2043785486","https://openalex.org/W2051498836","https://openalex.org/W2062533261","https://openalex.org/W2063061076","https://openalex.org/W2095450067","https://openalex.org/W2095610745","https://openalex.org/W2097018539","https://openalex.org/W2099746875","https://openalex.org/W2102475112","https://openalex.org/W2102729267","https://openalex.org/W2102785080","https://openalex.org/W2105407012","https://openalex.org/W2111165162","https://openalex.org/W2112063328","https://openalex.org/W2113167642","https://openalex.org/W2114356569","https://openalex.org/W2118033298","https://openalex.org/W2120444887","https://openalex.org/W2122757690","https://openalex.org/W2129817078","https://openalex.org/W2130365590","https://openalex.org/W2131906261","https://openalex.org/W2137706187","https://openalex.org/W2141490184","https://openalex.org/W2151614652","https://openalex.org/W2159710624","https://openalex.org/W2159725583","https://openalex.org/W2160055399","https://openalex.org/W2160289821","https://openalex.org/W2171904653","https://openalex.org/W2186564720","https://openalex.org/W2231924698","https://openalex.org/W2287595538","https://openalex.org/W3139721564","https://openalex.org/W3152376820","https://openalex.org/W4237900519","https://openalex.org/W4241505725","https://openalex.org/W4249006057","https://openalex.org/W6637151178","https://openalex.org/W6679030935","https://openalex.org/W6680597583","https://openalex.org/W6690000262"],"related_works":["https://openalex.org/W1966145327","https://openalex.org/W1485337887","https://openalex.org/W1488511360","https://openalex.org/W1781894645","https://openalex.org/W2894902932","https://openalex.org/W569715723","https://openalex.org/W188332989","https://openalex.org/W2982387199","https://openalex.org/W2106946048","https://openalex.org/W2120930843"],"abstract_inverted_index":{"Drive-by":[0],"download":[1],"attacks":[2],"attempt":[3,35,160],"to":[4,25,46,53,90,106,113,120,136],"compromise":[5],"a":[6,43,61,86,131,150],"victim's":[7],"computer":[8],"through":[9],"browser":[10],"vulnerabilities.":[11],"Often":[12],"they":[13],"are":[14,104,175],"launched":[15],"from":[16,57],"Malware":[17],"Distribution":[18],"Networks":[19],"(MDNs)":[20],"consisting":[21],"of":[22,60,64,85,124,168,196],"landing":[23,49,73,92,110,140,157,170],"pages":[24,50,74,93,111,158,171],"attract":[26],"traffic,":[27],"intermediate":[28],"redirection":[29],"servers,":[30],"and":[31,133,146,177,208],"exploit":[32],"servers":[33],"which":[34,117],"the":[36,48,68,82,95,125,154,164,169,193,197],"compromise.":[37],"In":[38,100],"this":[39,101,178],"paper,":[40],"we":[41,66,103,209],"present":[42],"novel":[44],"approach":[45,135],"discovering":[47],"that":[51,153],"lead":[52],"drive-by":[54,161],"downloads.":[55,162],"Starting":[56],"partial":[58],"knowledge":[59],"given":[62],"collection":[63],"MDNs":[65,198],"identify":[67,91,107],"malicious":[69,139,174],"content":[70],"on":[71],"their":[72],"using":[75,129,149],"multiclass":[76],"feature":[77],"selection.":[78],"We":[79,127,142],"then":[80],"query":[81],"webpage":[83],"cache":[84],"commercial":[87],"search":[88],"engine":[89],"containing":[94],"same":[96],"or":[97],"similar":[98],"content.":[99],"way":[102],"able":[105],"previously":[108],"unknown":[109],"belonging":[112],"already":[114],"identified":[115,156],"MDNs,":[116],"allows":[118],"us":[119],"expand":[121],"our":[122],"understanding":[123],"MDN.":[126],"explore":[128,210],"both":[130,144],"rule-based":[132,165],"classifier":[134],"identifying":[137],"potentially":[138],"pages.":[141],"build":[143],"systems":[145],"independently":[147],"verify":[148],"high-interaction":[151],"honeypot":[152],"newly":[155],"indeed":[159],"For":[163],"system":[166,204],"57%":[167],"predicted":[172],"as":[173],"confirmed,":[176],"success":[179],"rate":[180],"remains":[181],"constant":[182],"in":[183],"two":[184],"large":[185],"trials":[186],"spaced":[187],"five":[188],"months":[189],"apart.":[190],"This":[191],"extends":[192],"known":[194],"footprint":[195],"studied":[199],"by":[200],"17%.":[201],"The":[202],"classifier-based":[203],"is":[205],"less":[206],"successful,":[207],"possible":[211],"reasons.":[212]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":7},{"year":2016,"cited_by_count":6},{"year":2015,"cited_by_count":1},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}