{"id":"https://openalex.org/W1980793860","doi":"https://doi.org/10.1145/1298306.1298319","title":"Using uncleanliness to predict future botnet addresses","display_name":"Using uncleanliness to predict future botnet addresses","publication_year":2007,"publication_date":"2007-10-24","ids":{"openalex":"https://openalex.org/W1980793860","doi":"https://doi.org/10.1145/1298306.1298319","mag":"1980793860"},"language":"en","primary_location":{"id":"doi:10.1145/1298306.1298319","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1298306.1298319","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 7th ACM SIGCOMM conference on Internet measurement","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014249360","display_name":"Michael P. Collins","orcid":"https://orcid.org/0000-0003-4683-8004"},"institutions":[{"id":"https://openalex.org/I1337250831","display_name":"Federal Emergency Management Agency","ror":"https://ror.org/01g9x3v85","country_code":"US","type":"government","lineage":["https://openalex.org/I1282113950","https://openalex.org/I1337250831"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"M. Patrick Collins","raw_affiliation_strings":["CERT, Pittsburgh, PA","CERT, Pittsburgh, PA#TAB#"],"affiliations":[{"raw_affiliation_string":"CERT, Pittsburgh, PA","institution_ids":[]},{"raw_affiliation_string":"CERT, Pittsburgh, PA#TAB#","institution_ids":["https://openalex.org/I1337250831"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082030097","display_name":"Timothy J. Shimeall","orcid":"https://orcid.org/0000-0003-2486-3903"},"institutions":[{"id":"https://openalex.org/I1337250831","display_name":"Federal Emergency Management Agency","ror":"https://ror.org/01g9x3v85","country_code":"US","type":"government","lineage":["https://openalex.org/I1282113950","https://openalex.org/I1337250831"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Timothy J. Shimeall","raw_affiliation_strings":["CERT, Pittsburgh, PA","CERT, Pittsburgh, PA#TAB#"],"affiliations":[{"raw_affiliation_string":"CERT, Pittsburgh, PA","institution_ids":[]},{"raw_affiliation_string":"CERT, Pittsburgh, PA#TAB#","institution_ids":["https://openalex.org/I1337250831"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017085232","display_name":"Sidney Faber","orcid":null},"institutions":[{"id":"https://openalex.org/I1337250831","display_name":"Federal Emergency Management Agency","ror":"https://ror.org/01g9x3v85","country_code":"US","type":"government","lineage":["https://openalex.org/I1282113950","https://openalex.org/I1337250831"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sidney Faber","raw_affiliation_strings":["CERT, Pittsburgh, PA","CERT, Pittsburgh, PA#TAB#"],"affiliations":[{"raw_affiliation_string":"CERT, Pittsburgh, PA","institution_ids":[]},{"raw_affiliation_string":"CERT, Pittsburgh, PA#TAB#","institution_ids":["https://openalex.org/I1337250831"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009450031","display_name":"Jeff Janies","orcid":null},"institutions":[{"id":"https://openalex.org/I1337250831","display_name":"Federal Emergency Management Agency","ror":"https://ror.org/01g9x3v85","country_code":"US","type":"government","lineage":["https://openalex.org/I1282113950","https://openalex.org/I1337250831"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jeff Janies","raw_affiliation_strings":["CERT, Pittsburgh, PA","CERT, Pittsburgh, PA#TAB#"],"affiliations":[{"raw_affiliation_string":"CERT, Pittsburgh, PA","institution_ids":[]},{"raw_affiliation_string":"CERT, Pittsburgh, PA#TAB#","institution_ids":["https://openalex.org/I1337250831"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088285160","display_name":"Rhiannon Weaver","orcid":null},"institutions":[{"id":"https://openalex.org/I1337250831","display_name":"Federal Emergency Management Agency","ror":"https://ror.org/01g9x3v85","country_code":"US","type":"government","lineage":["https://openalex.org/I1282113950","https://openalex.org/I1337250831"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rhiannon Weaver","raw_affiliation_strings":["CERT, Pittsburgh, PA","CERT, Pittsburgh, PA#TAB#"],"affiliations":[{"raw_affiliation_string":"CERT, Pittsburgh, PA","institution_ids":[]},{"raw_affiliation_string":"CERT, Pittsburgh, PA#TAB#","institution_ids":["https://openalex.org/I1337250831"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071829601","display_name":"Markus De Shon","orcid":null},"institutions":[{"id":"https://openalex.org/I1337250831","display_name":"Federal Emergency Management Agency","ror":"https://ror.org/01g9x3v85","country_code":"US","type":"government","lineage":["https://openalex.org/I1282113950","https://openalex.org/I1337250831"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Markus De Shon","raw_affiliation_strings":["CERT, Pittsburgh, PA","CERT, Pittsburgh, PA#TAB#"],"affiliations":[{"raw_affiliation_string":"CERT, Pittsburgh, PA","institution_ids":[]},{"raw_affiliation_string":"CERT, Pittsburgh, PA#TAB#","institution_ids":["https://openalex.org/I1337250831"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017971040","display_name":"Joseph B. Kadane","orcid":"https://orcid.org/0000-0003-1548-5912"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joseph Kadane","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA","Carnegie-Mellon University, Pittsburgh, PA"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, PA","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5014249360"],"corresponding_institution_ids":["https://openalex.org/I1337250831"],"apc_list":null,"apc_paid":null,"fwci":16.5784,"has_fulltext":false,"cited_by_count":128,"citation_normalized_percentile":{"value":0.99223295,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"93","last_page":"104"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.988301157951355},{"id":"https://openalex.org/keywords/blocking","display_name":"Blocking (statistics)","score":0.7636339068412781},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7294638752937317},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6144943237304688},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.44755250215530396},{"id":"https://openalex.org/keywords/term","display_name":"Term (time)","score":0.4333055019378662},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2061164677143097},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.16470319032669067}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.988301157951355},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.7636339068412781},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7294638752937317},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6144943237304688},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.44755250215530396},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.4333055019378662},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2061164677143097},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.16470319032669067},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1298306.1298319","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1298306.1298319","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 7th ACM SIGCOMM conference on Internet measurement","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W38778492","https://openalex.org/W93530148","https://openalex.org/W96820266","https://openalex.org/W1529944579","https://openalex.org/W1530746640","https://openalex.org/W1550514379","https://openalex.org/W1630225947","https://openalex.org/W1744212210","https://openalex.org/W1985382559","https://openalex.org/W2020467615","https://openalex.org/W2080557752","https://openalex.org/W2102671922","https://openalex.org/W2119207862","https://openalex.org/W2124088278","https://openalex.org/W2125513999","https://openalex.org/W2130797543","https://openalex.org/W2133063338","https://openalex.org/W2144728197","https://openalex.org/W2165080990","https://openalex.org/W2168938675","https://openalex.org/W2313571840","https://openalex.org/W2612899418","https://openalex.org/W3141492569","https://openalex.org/W4285719527","https://openalex.org/W6603773863","https://openalex.org/W6603987825"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W3159690896","https://openalex.org/W4230824443","https://openalex.org/W2945572725","https://openalex.org/W1989286518","https://openalex.org/W2921012173","https://openalex.org/W2758517546","https://openalex.org/W3134680667","https://openalex.org/W2804396347","https://openalex.org/W2185943007"],"abstract_inverted_index":{"The":[0],"increased":[1],"use":[2],"of":[3,14,21,44],"botnets":[4],"as":[5],"an":[6,42],"attack":[7],"tool":[8],"and":[9],"the":[10,19,45],"awareness":[11],"attackers":[12],"have":[13],"blocking":[15],"lists":[16],"leads":[17],"to":[18,52],"question":[20],"whether":[22],"we":[23,33,39],"can":[24],"effectively":[25],"predict":[26],"future":[27],"bot":[28],"locations.":[29],"To":[30],"that":[31,38],"end,":[32],"introduce":[34],"a":[35,50],"network":[36,51],"quality":[37],"term":[40],"uncleanliness:":[41],"indicator":[43],"propensity":[46],"for":[47],"hosts":[48],"in":[49],"be":[53],"compromised":[54],"by":[55],"outside":[56],"parties.":[57]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":8},{"year":2014,"cited_by_count":10},{"year":2013,"cited_by_count":8},{"year":2012,"cited_by_count":12}],"updated_date":"2026-03-10T16:38:18.471706","created_date":"2025-10-10T00:00:00"}