{"id":"https://openalex.org/W4393372472","doi":"https://doi.org/10.1109/ecrime61234.2023.10485500","title":"In the Market for a Botnet? An In-Depth Analysis of Botnet-Related Listings on Darkweb Marketplaces","display_name":"In the Market for a Botnet? An In-Depth Analysis of Botnet-Related Listings on Darkweb Marketplaces","publication_year":2023,"publication_date":"2023-11-15","ids":{"openalex":"https://openalex.org/W4393372472","doi":"https://doi.org/10.1109/ecrime61234.2023.10485500"},"language":"en","primary_location":{"id":"doi:10.1109/ecrime61234.2023.10485500","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/ecrime61234.2023.10485500","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 APWG Symposium on Electronic Crime Research (eCrime)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://backend.orbit.dtu.dk/ws/files/346007119/Cambridge_1_Darkweb_ECrime_2023_2_.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055201610","display_name":"Dimitrios Georgoulias","orcid":"https://orcid.org/0000-0001-5842-1236"},"institutions":[{"id":"https://openalex.org/I891191580","display_name":"Aalborg University","ror":"https://ror.org/04m5j1k67","country_code":"DK","type":"education","lineage":["https://openalex.org/I891191580"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Dimitrios Georgoulias","raw_affiliation_strings":["Cyber Security Group Aalborg University,Copenhagen,Denmark","Cyber Security Group Aalborg University, Copenhagen, Denmark"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Group Aalborg University,Copenhagen,Denmark","institution_ids":["https://openalex.org/I891191580"]},{"raw_affiliation_string":"Cyber Security Group Aalborg University, Copenhagen, Denmark","institution_ids":["https://openalex.org/I891191580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034797912","display_name":"Jens Myrup Pedersen","orcid":"https://orcid.org/0000-0002-1903-2921"},"institutions":[{"id":"https://openalex.org/I891191580","display_name":"Aalborg University","ror":"https://ror.org/04m5j1k67","country_code":"DK","type":"education","lineage":["https://openalex.org/I891191580"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Jens Myrup Pedersen","raw_affiliation_strings":["Cyber Security Group Aalborg University,Copenhagen,Denmark","Cyber Security Group Aalborg University, Copenhagen, Denmark"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Group Aalborg University,Copenhagen,Denmark","institution_ids":["https://openalex.org/I891191580"]},{"raw_affiliation_string":"Cyber Security Group Aalborg University, Copenhagen, Denmark","institution_ids":["https://openalex.org/I891191580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055346534","display_name":"Alice Hutchings","orcid":"https://orcid.org/0000-0003-3037-2684"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Alice Hutchings","raw_affiliation_strings":["Computer Laboratory University of Cambridge,Cambridge,United Kingdom","Computer Laboratory University of Cambridge, Cambridge, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Laboratory University of Cambridge,Cambridge,United Kingdom","institution_ids":["https://openalex.org/I241749"]},{"raw_affiliation_string":"Computer Laboratory University of Cambridge, Cambridge, United Kingdom","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043639617","display_name":"Morten Falch","orcid":"https://orcid.org/0000-0002-2649-215X"},"institutions":[{"id":"https://openalex.org/I891191580","display_name":"Aalborg University","ror":"https://ror.org/04m5j1k67","country_code":"DK","type":"education","lineage":["https://openalex.org/I891191580"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Morten Falch","raw_affiliation_strings":["Cyber Security Group Aalborg University,Copenhagen,Denmark","Cyber Security Group Aalborg University, Copenhagen, Denmark"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Group Aalborg University,Copenhagen,Denmark","institution_ids":["https://openalex.org/I891191580"]},{"raw_affiliation_string":"Cyber Security Group Aalborg University, Copenhagen, Denmark","institution_ids":["https://openalex.org/I891191580"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083149653","display_name":"Emmanouil Vasilomanolakis","orcid":"https://orcid.org/0000-0001-5068-9158"},"institutions":[{"id":"https://openalex.org/I96673099","display_name":"Technical University of Denmark","ror":"https://ror.org/04qtj9h94","country_code":"DK","type":"education","lineage":["https://openalex.org/I96673099"]}],"countries":["DK"],"is_corresponding":false,"raw_author_name":"Emmanouil Vasilomanolakis","raw_affiliation_strings":["DTU Compute Technical University of Denmark,Kongens Lyngby,Denmark","DTU Compute Technical University of Denmark, Kongens Lyngby, Denmark"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"DTU Compute Technical University of Denmark,Kongens Lyngby,Denmark","institution_ids":["https://openalex.org/I96673099"]},{"raw_affiliation_string":"DTU Compute Technical University of Denmark, Kongens Lyngby, Denmark","institution_ids":["https://openalex.org/I96673099"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"2","issue":null,"first_page":"1","last_page":"14"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11838","display_name":"Crime, Illicit Activities, and Governance","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.985588550567627},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5148760080337524},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40878719091415405},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.32297375798225403},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.30041760206222534},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.22084137797355652}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.985588550567627},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5148760080337524},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40878719091415405},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.32297375798225403},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.30041760206222534},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.22084137797355652}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/ecrime61234.2023.10485500","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/ecrime61234.2023.10485500","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 APWG Symposium on Electronic Crime Research (eCrime)","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.atira.dk:openaire/5a26b98b-282a-47db-ab4a-a95306c41451","is_oa":true,"landing_page_url":"https://vbn.aau.dk/da/publications/5a26b98b-282a-47db-ab4a-a95306c41451","pdf_url":"https://backend.orbit.dtu.dk/ws/files/346007119/Cambridge_1_Darkweb_ECrime_2023_2_.pdf","source":{"id":"https://openalex.org/S4306401731","display_name":"VBN Forskningsportal (Aalborg Universitet)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I891191580","host_organization_name":"Aalborg University","host_organization_lineage":["https://openalex.org/I891191580"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Georgoulias, D, Pedersen, J M, Hutchings, A, Falch, M & Vasilomanolakis, E 2023, In the Market for a Botnet? An In-Depth Analysis of Botnet-Related Listings on Darkweb Marketplaces. in Proceedings of the 2023 APWG Symposium on Electronic Crime Research, eCrime 2023. IEEE Computer Society Press, eCrime Researchers Summit, eCrime, 2023 APWG Symposium on Electronic Crime Research, eCrime 2023, Barcelona, Spain, 15/11/2023. https://doi.org/10.1109/eCrime61234.2023.10485500","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:pure.atira.dk:publications/ede93075-ae94-4aed-a087-e1429c1c0c15","is_oa":true,"landing_page_url":"https://orbit.dtu.dk/en/publications/ede93075-ae94-4aed-a087-e1429c1c0c15","pdf_url":null,"source":{"id":"https://openalex.org/S4306400705","display_name":"Technical University of Denmark, DTU Orbit (Technical University of Denmark, DTU)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I96673099","host_organization_name":"Technical University of Denmark","host_organization_lineage":["https://openalex.org/I96673099"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Georgoulias , D , Pedersen , J M , Hutchings , A , Falch , M & Vasilomanolakis , E 2023 , In the market for a Botnet? An in-depth analysis of botnet-related listings on Darkweb marketplaces . in Proceedings of Symposium on Electronic Crime Research 2023 . Symposium on Electronic Crime Research 2023 , Barcelona , Spain , 15/11/2023 .","raw_type":"contributionToPeriodical"}],"best_oa_location":{"id":"pmh:oai:pure.atira.dk:openaire/5a26b98b-282a-47db-ab4a-a95306c41451","is_oa":true,"landing_page_url":"https://vbn.aau.dk/da/publications/5a26b98b-282a-47db-ab4a-a95306c41451","pdf_url":"https://backend.orbit.dtu.dk/ws/files/346007119/Cambridge_1_Darkweb_ECrime_2023_2_.pdf","source":{"id":"https://openalex.org/S4306401731","display_name":"VBN Forskningsportal (Aalborg Universitet)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I891191580","host_organization_name":"Aalborg University","host_organization_lineage":["https://openalex.org/I891191580"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Georgoulias, D, Pedersen, J M, Hutchings, A, Falch, M & Vasilomanolakis, E 2023, In the Market for a Botnet? An In-Depth Analysis of Botnet-Related Listings on Darkweb Marketplaces. in Proceedings of the 2023 APWG Symposium on Electronic Crime Research, eCrime 2023. IEEE Computer Society Press, eCrime Researchers Summit, eCrime, 2023 APWG Symposium on Electronic Crime Research, eCrime 2023, Barcelona, Spain, 15/11/2023. https://doi.org/10.1109/eCrime61234.2023.10485500","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4393372472.pdf","grobid_xml":"https://content.openalex.org/works/W4393372472.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W187462026","https://openalex.org/W1796296964","https://openalex.org/W1986232037","https://openalex.org/W2007118926","https://openalex.org/W2024919586","https://openalex.org/W2065323196","https://openalex.org/W2113341218","https://openalex.org/W2117310570","https://openalex.org/W2121252355","https://openalex.org/W2191989567","https://openalex.org/W2250463012","https://openalex.org/W2414519424","https://openalex.org/W2443488742","https://openalex.org/W2738032993","https://openalex.org/W2787923712","https://openalex.org/W2798110387","https://openalex.org/W2912148360","https://openalex.org/W2963980822","https://openalex.org/W3103150840","https://openalex.org/W3211873429","https://openalex.org/W3216238677","https://openalex.org/W4231393767","https://openalex.org/W4308700679","https://openalex.org/W4311609954","https://openalex.org/W4385692400","https://openalex.org/W6607713467","https://openalex.org/W6648277777","https://openalex.org/W6689880219","https://openalex.org/W6693548710","https://openalex.org/W6983410219"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W3159690896","https://openalex.org/W4230824443","https://openalex.org/W1989286518","https://openalex.org/W2945572725","https://openalex.org/W2921012173","https://openalex.org/W2758517546","https://openalex.org/W3134680667","https://openalex.org/W2804396347"],"abstract_inverted_index":{"The":[0],"Darkweb":[1,13],"is":[2],"highly":[3],"popular":[4],"and":[5,25,28,46,95,122,160,193,210],"widely":[6],"used":[7],"for":[8],"several":[9],"types":[10],"of":[11,30,75,86,104,169,180,184,213],"cybercrime.":[12],"marketplaces":[14],"in":[15,116,157,216],"particular,":[16],"are":[17],"meeting":[18],"places":[19],"that":[20,174],"provide":[21,53],"anonymity,":[22],"illegal":[23],"product":[24],"service":[26],"variety,":[27],"ease":[29],"use.":[31],"Botmasters":[32],"can":[33,60,70],"utilize":[34,126,207],"these":[35,68],"platforms":[36],"to":[37,43,56,118,132,137,153,188,219],"acquire":[38],"the":[39,127,134,149,154,185,189,199,208,214,226],"necessary":[40],"components":[41,69],"needed":[42],"set":[44,85],"up":[45],"maintain":[47],"a":[48,65,76,82,102,166,177],"botnet":[49,84,128,155,190],"infrastructure,":[50],"but":[51],"also":[52,61],"their":[54,221],"services":[55],"clients.":[57],"Since":[58],"botnets":[59],"be":[62,71],"viewed":[63],"from":[64,165],"business":[66,77,150],"perspective,":[67],"characterized":[72],"as":[73],"elements":[74],"model,":[78],"each":[79],"associated":[80],"with":[81,96,108],"different":[83],"activities.":[87],"In":[88],"this":[89,142,163],"paper,":[90],"we":[91,125,144,206],"crawl":[92],"26":[93,227],"marketplace":[94,119],"focus":[97],"on":[98,147,182],"botnet-related":[99],"listings":[100,136],"form":[101],"dataset":[103],"36,314":[105],"listings,":[106,121],"along":[107],"1,163":[109],"vendors.":[110,123],"We":[111],"present":[112],"our":[113],"aggregated":[114],"findings":[115],"regard":[117],"characteristics,":[120],"Additionally,":[124],"Value":[129],"Chain":[130],"Model":[131],"correlate":[133],"targeted":[135],"specific":[138],"model":[139,151],"segments.":[140],"With":[141],"approach":[143],"gain":[145],"insight":[146],"how":[148],"relates":[152],"market":[156],"real":[158],"time,":[159],"what":[161],"significance":[162],"holds":[164],"botmaster's":[167],"point":[168],"view.":[170],"Our":[171],"results":[172],"suggest":[173],"botmasters":[175],"have":[176],"wide":[178],"variety":[179],"options":[181],"all":[183,196],"activities":[186],"related":[187],"setup,":[191],"maintenance,":[192],"revenue":[194],"generation,":[195],"available":[197],"within":[198],"marketplaces,":[200],"at":[201],"quite":[202],"low":[203],"prices.":[204],"Lastly,":[205],"usernames":[209],"PGP":[211],"keys":[212],"vendors,":[215],"an":[217],"effort":[218],"detect":[220],"potential":[222],"cross-platform":[223],"activity":[224],"throughout":[225],"platforms.":[228]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}