{"id":"https://openalex.org/W2156805595","doi":"https://doi.org/10.1109/acsac.2006.11","title":"Addressing SMTP-Based Mass-Mailing Activity within Enterprise Networks","display_name":"Addressing SMTP-Based Mass-Mailing Activity within Enterprise Networks","publication_year":2006,"publication_date":"2006-12-01","ids":{"openalex":"https://openalex.org/W2156805595","doi":"https://doi.org/10.1109/acsac.2006.11","mag":"2156805595"},"language":"en","primary_location":{"id":"doi:10.1109/acsac.2006.11","is_oa":false,"landing_page_url":"https://doi.org/10.1109/acsac.2006.11","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":"1063-9527","issn":["1063-9527","2576-9103"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2006 22nd Annual Computer Security Applications Conference (ACSAC'06)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055250157","display_name":"David Whyte","orcid":"https://orcid.org/0000-0002-9732-7944"},"institutions":[{"id":"https://openalex.org/I67031392","display_name":"Carleton University","ror":"https://ror.org/02qtvee93","country_code":"CA","type":"education","lineage":["https://openalex.org/I67031392"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"David Whyte","raw_affiliation_strings":["School of Computer Science, Carleton University, Ottawa, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Carleton University, Ottawa, Canada","institution_ids":["https://openalex.org/I67031392"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011846293","display_name":"Paul C. van Oorschot","orcid":"https://orcid.org/0000-0002-5038-5370"},"institutions":[{"id":"https://openalex.org/I67031392","display_name":"Carleton University","ror":"https://ror.org/02qtvee93","country_code":"CA","type":"education","lineage":["https://openalex.org/I67031392"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"P.c. Oorschot","raw_affiliation_strings":["Carleton University, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carleton University, Canada","institution_ids":["https://openalex.org/I67031392"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003125546","display_name":"Evangelos Kranakis","orcid":"https://orcid.org/0000-0002-8959-4428"},"institutions":[{"id":"https://openalex.org/I67031392","display_name":"Carleton University","ror":"https://ror.org/02qtvee93","country_code":"CA","type":"education","lineage":["https://openalex.org/I67031392"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Evangelos Kranakis","raw_affiliation_strings":["School of Computer Science, Carleton University, Ottawa, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Carleton University, Ottawa, Canada","institution_ids":["https://openalex.org/I67031392"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I67031392"],"apc_list":null,"apc_paid":null,"fwci":1.1752,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.79324942,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"129","issue":null,"first_page":"393","last_page":"402"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.72444748878479},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5659480094909668},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5534824132919312},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5299908518791199},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5269623398780823},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.47180452942848206},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.47034385800361633},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.4472106099128723},{"id":"https://openalex.org/keywords/enterprise-private-network","display_name":"Enterprise private network","score":0.42539823055267334},{"id":"https://openalex.org/keywords/domain-name-system","display_name":"Domain Name System","score":0.4180886745452881},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3036247491836548},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.15420714020729065}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.72444748878479},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5659480094909668},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5534824132919312},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5299908518791199},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5269623398780823},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.47180452942848206},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.47034385800361633},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.4472106099128723},{"id":"https://openalex.org/C149859251","wikidata":"https://www.wikidata.org/wiki/Q483426","display_name":"Enterprise private network","level":2,"score":0.42539823055267334},{"id":"https://openalex.org/C35026560","wikidata":"https://www.wikidata.org/wiki/Q8767","display_name":"Domain Name System","level":3,"score":0.4180886745452881},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3036247491836548},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15420714020729065}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/acsac.2006.11","is_oa":false,"landing_page_url":"https://doi.org/10.1109/acsac.2006.11","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":"1063-9527","issn":["1063-9527","2576-9103"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2006 22nd Annual Computer Security Applications Conference (ACSAC'06)","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.216.3091","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.216.3091","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.acsac.org/2006/papers/93.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.95.91","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.95.91","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.scs.carleton.ca/~dlwhyte/pubs/whyte-acsac06.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W111222594","https://openalex.org/W139772808","https://openalex.org/W1638186213","https://openalex.org/W1651936986","https://openalex.org/W2097021366","https://openalex.org/W2111947034","https://openalex.org/W2161620955","https://openalex.org/W2167153793","https://openalex.org/W2168874936","https://openalex.org/W2240246332","https://openalex.org/W4298733397","https://openalex.org/W4302441632","https://openalex.org/W6604529518","https://openalex.org/W6605725336","https://openalex.org/W6636887004"],"related_works":["https://openalex.org/W1642214788","https://openalex.org/W2733931179","https://openalex.org/W2054545906","https://openalex.org/W2065991182","https://openalex.org/W2965181964","https://openalex.org/W3195171228","https://openalex.org/W2948569047","https://openalex.org/W596534943","https://openalex.org/W2760320879","https://openalex.org/W3214913819"],"abstract_inverted_index":{"Malicious":[0],"mass-mailing":[1,14,66,71],"activity":[2],"on":[3,96],"the":[4,97,104],"Internet":[5],"is":[6,29,76],"a":[7,38,44,49],"serious":[8],"and":[9,17,59,79],"continuing":[10],"threat":[11],"that":[12,46],"includes":[13],"worms,":[15],"spam,":[16],"phishing.":[18],"A":[19],"mechanism":[20],"commonly":[21],"used":[22],"to":[23,69],"deliver":[24],"such":[25],"malicious":[26,39],"mass":[27],"mail":[28,40],"an":[30,34],"SMTP-engine,":[31],"which":[32],"turns":[33],"infected":[35],"system":[36,90],"into":[37],"server.":[41],"We":[42],"present":[43],"technique":[45,110],"enables,":[47],"within":[48,103],"single":[50],"mailing":[51],"attempt":[52],"in":[53],"many":[54],"popular":[55],"network":[56,84],"environments,":[57],"detection":[58,72,109],"containment":[60],"of":[61,99],"(even":[62],"zero-day)":[63],"SMTP-engine":[64],"based":[65],"activity.":[67],"Contrary":[68],"other":[70],"techniques":[73],"our":[74],"approach":[75],"content":[77],"independent":[78],"requires":[80,111],"no":[81],"attachment":[82],"processing,":[83],"traffic":[85],"correlation,":[86],"statistical":[87],"measures,":[88],"or":[89],"behavioral":[91],"analysis.":[92],"It":[93],"relies":[94],"instead":[95],"observation":[98],"DNS":[100],"MX":[101],"queries":[102],"enterprise":[105],"network.":[106],"This":[107],"stateless":[108],"minimal":[112],"computational":[113],"resources":[114],"making":[115],"it":[116],"ideally":[117],"suited":[118],"for":[119],"real-time":[120],"wire-speed":[121],"deployment.":[122]},"counts_by_year":[{"year":2023,"cited_by_count":2},{"year":2020,"cited_by_count":2},{"year":2014,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}