{"id":"https://openalex.org/W2096273775","doi":"https://doi.org/10.1145/1282380.1282415","title":"How dynamic are IP addresses?","display_name":"How dynamic are IP addresses?","publication_year":2007,"publication_date":"2007-08-27","ids":{"openalex":"https://openalex.org/W2096273775","doi":"https://doi.org/10.1145/1282380.1282415","mag":"2096273775"},"language":"en","primary_location":{"id":"doi:10.1145/1282380.1282415","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1282380.1282415","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2007 conference on Applications, technologies, architectures, and protocols for computer communications","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103462744","display_name":"Yinglian Xie","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yinglian Xie","raw_affiliation_strings":["Microsoft Research, Mountain View, CA","[Microsoft Research, Mountain View, CA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Mountain View, CA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[Microsoft Research, Mountain View, CA]","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100728882","display_name":"Fang Yu","orcid":"https://orcid.org/0000-0001-9670-0826"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fang Yu","raw_affiliation_strings":["Microsoft Research, Mountain View, CA","[Microsoft Research, Mountain View, CA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Mountain View, CA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[Microsoft Research, Mountain View, CA]","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079669827","display_name":"Kannan Achan","orcid":"https://orcid.org/0009-0000-9186-3175"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kannan Achan","raw_affiliation_strings":["Microsoft Research, Mountain View, CA","[Microsoft Research, Mountain View, CA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Mountain View, CA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[Microsoft Research, Mountain View, CA]","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010222579","display_name":"Eliot Gillum","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eliot Gillum","raw_affiliation_strings":["Microsoft Research, Mountain View, CA","[Microsoft Research, Mountain View, CA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Mountain View, CA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[Microsoft Research, Mountain View, CA]","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110821536","display_name":"Mois\u00e9s Goldszmidt","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Moises Goldszmidt","raw_affiliation_strings":["Microsoft Research, Mountain View, CA","[Microsoft Research, Mountain View, CA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Mountain View, CA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[Microsoft Research, Mountain View, CA]","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064860434","display_name":"Ted Wobber","orcid":null},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ted Wobber","raw_affiliation_strings":["Microsoft Research, Mountain View, CA","[Microsoft Research, Mountain View, CA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research, Mountain View, CA","institution_ids":["https://openalex.org/I1290206253"]},{"raw_affiliation_string":"[Microsoft Research, Mountain View, CA]","institution_ids":["https://openalex.org/I1290206253"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1290206253"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":169,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"301","last_page":"312"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.840165376663208},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8118804693222046},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.8047001361846924},{"id":"https://openalex.org/keywords/login","display_name":"Login","score":0.6685889363288879},{"id":"https://openalex.org/keywords/ip-address","display_name":"Ip address","score":0.5894350409507751},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.5189180374145508},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4642537236213684},{"id":"https://openalex.org/keywords/network-address-translation","display_name":"Network address translation","score":0.4513286352157593},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.44854846596717834},{"id":"https://openalex.org/keywords/web-server","display_name":"Web server","score":0.4430026412010193},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.36886027455329895},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3283067047595978},{"id":"https://openalex.org/keywords/internet-protocol","display_name":"Internet Protocol","score":0.20902833342552185}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.840165376663208},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8118804693222046},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.8047001361846924},{"id":"https://openalex.org/C113324615","wikidata":"https://www.wikidata.org/wiki/Q472302","display_name":"Login","level":2,"score":0.6685889363288879},{"id":"https://openalex.org/C2985371682","wikidata":"https://www.wikidata.org/wiki/Q11135","display_name":"Ip address","level":2,"score":0.5894350409507751},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.5189180374145508},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4642537236213684},{"id":"https://openalex.org/C147873670","wikidata":"https://www.wikidata.org/wiki/Q11182","display_name":"Network address translation","level":4,"score":0.4513286352157593},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.44854846596717834},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.4430026412010193},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.36886027455329895},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3283067047595978},{"id":"https://openalex.org/C35341882","wikidata":"https://www.wikidata.org/wiki/Q8795","display_name":"Internet Protocol","level":3,"score":0.20902833342552185},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/1282380.1282415","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1282380.1282415","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2007 conference on Applications, technologies, architectures, and protocols for computer communications","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.128.5470","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.128.5470","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://research.microsoft.com/projects/sgps/sigcomm2007.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.431.5976","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.431.5976","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.sigcomm.org/sites/default/files/ccr/papers/2007/October/1282427-1282415.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.72.5382","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.72.5382","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://research.microsoft.com/users/wobber/sigcomm07-onefile.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W3805906","https://openalex.org/W8020565","https://openalex.org/W1550514379","https://openalex.org/W1593327293","https://openalex.org/W1594013288","https://openalex.org/W1598571137","https://openalex.org/W1913575206","https://openalex.org/W2009217060","https://openalex.org/W2068593619","https://openalex.org/W2080557752","https://openalex.org/W2113344319","https://openalex.org/W2121320294","https://openalex.org/W2124088278","https://openalex.org/W2127133592","https://openalex.org/W2127817985","https://openalex.org/W2137754263","https://openalex.org/W2141971016","https://openalex.org/W2169196622","https://openalex.org/W2489605978","https://openalex.org/W3141492569","https://openalex.org/W4233802931","https://openalex.org/W4247712687","https://openalex.org/W6600171677","https://openalex.org/W6635707985","https://openalex.org/W6679203017","https://openalex.org/W6684479765","https://openalex.org/W7018683064"],"related_works":["https://openalex.org/W2077124921","https://openalex.org/W2045960219","https://openalex.org/W2982352233","https://openalex.org/W2099374284","https://openalex.org/W3091839635","https://openalex.org/W2382865804","https://openalex.org/W2225080631","https://openalex.org/W2120058777","https://openalex.org/W3162333642","https://openalex.org/W2096273775"],"abstract_inverted_index":{"This":[0,52],"paper":[1],"introduces":[2],"a":[3,33,40,74,110],"novel":[4],"algorithm,":[5],"UDmap,":[6],"to":[7,32,83,117,134,147,165],"identify":[8,136,167],"dynamically":[9],"assigned":[10],"IP":[11,45,58,94,138,170],"addresses":[12,46,59,95,139],"and":[13,22,38,153,168],"analyze":[14],"their":[15],"dynamics":[16],"pattern.":[17],"UDmap":[18,31],"is":[19,63,160],"fully":[20],"automatic,":[21],"relies":[23],"only":[24],"on":[25,91],"application-level":[26],"server":[27,78],"logs.":[28],"We":[29,143],"applied":[30],"month-long":[34],"Hotmail":[35,76],"user-login":[36],"trace":[37,98],"identified":[39],"significant":[41],"number":[42],"of":[43,57,87,113,119,131],"dynamic":[44,62,93,137],"-":[47,115],"more":[48],"than":[49],"102":[50],"million.":[51],"suggests":[53],"that":[54,60,85],"the":[55,92,129,161],"fraction":[56],"are":[61],"by":[64,124],"no":[65],"means":[66],"negligible.":[67],"Using":[68],"this":[69,159],"information":[70],"in":[71,96],"combination":[72],"with":[73],"three-month":[75],"email":[77],"log,":[79],"we":[80],"were":[81],"able":[82,133],"establish":[84],"95.6%":[86],"mail":[88,106],"servers":[89,107],"setup":[90],"our":[97,157],"sent":[99,108],"out":[100,109],"solely":[101],"spam":[102,114,121,141],"emails.":[103],"Moreover,":[104],"these":[105],"large":[111],"amount":[112],"amounting":[116],"42.2%":[118],"all":[120],"emails":[122],"received":[123],"Hotmail.":[125],"These":[126],"results":[127],"highlight":[128],"importance":[130],"being":[132],"accurately":[135],"for":[140,149],"filtering.":[142],"expect":[144],"similar":[145],"benefits":[146],"arise":[148],"phishing":[150],"site":[151],"identification":[152],"botnet":[154],"detection.":[155],"To":[156],"knowledge,":[158],"first":[162],"successful":[163],"attempt":[164],"automatically":[166],"understand":[169],"address":[171],"dynamics.":[172]},"counts_by_year":[{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":3},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":9},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":6},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":14},{"year":2015,"cited_by_count":6},{"year":2014,"cited_by_count":6},{"year":2013,"cited_by_count":17},{"year":2012,"cited_by_count":12}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}