{"id":"https://openalex.org/W1993861188","doi":"https://doi.org/10.1109/tdsc.2014.2382590","title":"An Empirical Study of HTTP-based Financial Botnets","display_name":"An Empirical Study of HTTP-based Financial Botnets","publication_year":2014,"publication_date":"2014-12-19","ids":{"openalex":"https://openalex.org/W1993861188","doi":"https://doi.org/10.1109/tdsc.2014.2382590","mag":"1993861188"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2014.2382590","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2014.2382590","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062292211","display_name":"Aditya Sood","orcid":"https://orcid.org/0000-0003-3739-2012"},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aditya K. Sood","raw_affiliation_strings":["Department of Computer Science and Engineering, Michigan State University, East Lansing, MI, USA","Dept. of Comput. Sci. & Eng., Michigan State Univ., East Lansing, MI, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Michigan State University, East Lansing, MI, USA","institution_ids":["https://openalex.org/I87216513"]},{"raw_affiliation_string":"Dept. of Comput. Sci. & Eng., Michigan State Univ., East Lansing, MI, USA#TAB#","institution_ids":["https://openalex.org/I87216513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002810652","display_name":"Sherali Zeadally","orcid":"https://orcid.org/0000-0002-5982-8190"},"institutions":[{"id":"https://openalex.org/I143302722","display_name":"University of Kentucky","ror":"https://ror.org/02k3smh20","country_code":"US","type":"education","lineage":["https://openalex.org/I143302722"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sherali Zeadally","raw_affiliation_strings":["College of Communication and Information, University of Kentucky, Lexington, KY, USA","(College of Communication and Information, University of Kentucky, Lexington, KY, USA)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Communication and Information, University of Kentucky, Lexington, KY, USA","institution_ids":["https://openalex.org/I143302722"]},{"raw_affiliation_string":"(College of Communication and Information, University of Kentucky, Lexington, KY, USA)","institution_ids":["https://openalex.org/I143302722"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036446758","display_name":"Richard Enbody","orcid":"https://orcid.org/0000-0002-2415-5651"},"institutions":[{"id":"https://openalex.org/I87216513","display_name":"Michigan State University","ror":"https://ror.org/05hs6h993","country_code":"US","type":"education","lineage":["https://openalex.org/I87216513"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Richard J. Enbody","raw_affiliation_strings":["Department of Computer Science and Engineering, Michigan State University, East Lansing, MI, USA","Dept. of Comput. Sci. & Eng., Michigan State Univ., East Lansing, MI, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Michigan State University, East Lansing, MI, USA","institution_ids":["https://openalex.org/I87216513"]},{"raw_affiliation_string":"Dept. of Comput. Sci. & Eng., Michigan State Univ., East Lansing, MI, USA#TAB#","institution_ids":["https://openalex.org/I87216513"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.4378,"has_fulltext":false,"cited_by_count":34,"citation_normalized_percentile":{"value":0.89723414,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"13","issue":"2","first_page":"236","last_page":"251"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9706284999847412},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7160621285438538},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6356048583984375},{"id":"https://openalex.org/keywords/command-and-control","display_name":"Command and control","score":0.476909875869751},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.14333119988441467},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.10360768437385559},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.08877089619636536}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9706284999847412},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7160621285438538},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6356048583984375},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.476909875869751},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.14333119988441467},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.10360768437385559},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.08877089619636536}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2014.2382590","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2014.2382590","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.49000000953674316,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1412796528","https://openalex.org/W1561983441","https://openalex.org/W1565598538","https://openalex.org/W1761672165","https://openalex.org/W1788061570","https://openalex.org/W1970867218","https://openalex.org/W1977415353","https://openalex.org/W1989598342","https://openalex.org/W1992455053","https://openalex.org/W2018468546","https://openalex.org/W2044856659","https://openalex.org/W2045880951","https://openalex.org/W2052466667","https://openalex.org/W2054466620","https://openalex.org/W2058212554","https://openalex.org/W2081835387","https://openalex.org/W2112104279","https://openalex.org/W2118874001","https://openalex.org/W2126709396","https://openalex.org/W2136495567","https://openalex.org/W2157155774","https://openalex.org/W2163283652","https://openalex.org/W4238855527","https://openalex.org/W4285719527","https://openalex.org/W6628266772","https://openalex.org/W6633578641"],"related_works":["https://openalex.org/W86804927","https://openalex.org/W2898126008","https://openalex.org/W2130216882","https://openalex.org/W3076212043","https://openalex.org/W2621188356","https://openalex.org/W2182674428","https://openalex.org/W1499648394","https://openalex.org/W1591351727","https://openalex.org/W2596503800","https://openalex.org/W2771198651"],"abstract_inverted_index":{"Cyber":[0],"criminals":[1],"are":[2,9],"covertly":[3],"attacking":[4,34],"critical":[5,90],"infrastructures,":[6],"and":[7,63,85,98,107,132,138,145],"botnets":[8,19,74,97,166],"a":[10,146,168],"common":[11],"component":[12],"of":[13,59,65,67,95,126,149,152,162,170,182],"those":[14],"attacks.":[15],"In":[16,121],"recent":[17],"years,":[18],"have":[20],"been":[21],"shifting":[22],"their":[23],"focus":[24],"from":[25],"broad-based":[26],"attacks":[27,117],"to":[28,104,113,130],"more":[29,109],"targeted":[30],"ones":[31],"such":[32],"as":[33,76],"financial":[35,46,73,154,165,188],"institutions,":[36],"especially":[37],"banks.":[38],"The":[39],"primary":[40],"reason":[41],"for":[42],"this":[43],"shift":[44],"towards":[45],"institutions":[47],"is":[48],"that,":[49],"where":[50],"the":[51,60,68,93,101,150,160,183],"money":[52],"is.":[53],"We":[54],"present":[55],"an":[56,143],"empirical":[57],"study":[58,88,157],"components,":[61],"features":[62],"operations":[64],"some":[66,181],"most":[69],"widely":[70],"deployed":[71],"HTTP-based":[72,153,164,187],"(such":[75],"Zeus,":[77],"SpyEye,":[78],"ICE":[79],"1X,":[80],"Citadel,":[81],"Carberp,":[82],"Tinba,":[83],"Bugat":[84],"Shylock).":[86],"Our":[87],"provides":[89,142],"insights":[91],"into":[92],"design":[94],"these":[96,119],"should":[99],"help":[100,179],"security":[102,111,175],"community":[103],"generate":[105],"intelligence":[106],"develop":[108],"robust":[110],"solutions":[112,176],"defend":[114],"against":[115],"cyber":[116],"by":[118,186],"botnets.":[120,155,189],"addition,":[122],"our":[123],"comparative":[124],"analysis":[125],"insidious":[127],"techniques":[128,184],"pertaining":[129],"Command":[131],"Control":[133],"(C&C)":[134],"communication,":[135],"system":[136],"exploitation":[137],"data":[139],"exfiltration":[140],"also":[141,158],"effective":[144],"holistic":[147],"view":[148],"capabilities":[151],"This":[156],"highlights":[159],"evolution":[161],"various":[163],"over":[167],"period":[169],"time.":[171],"Finally,":[172],"we":[173],"discuss":[174],"that":[177],"can":[178],"mitigate":[180],"used":[185]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":5},{"year":2016,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}