{"id":"https://openalex.org/W2002537105","doi":"https://doi.org/10.1145/1555349.1555352","title":"Botnet spam campaigns can be long lasting","display_name":"Botnet spam campaigns can be long lasting","publication_year":2009,"publication_date":"2009-06-15","ids":{"openalex":"https://openalex.org/W2002537105","doi":"https://doi.org/10.1145/1555349.1555352","mag":"2002537105"},"language":"en","primary_location":{"id":"doi:10.1145/1555349.1555352","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1555349.1555352","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the eleventh international joint conference on Measurement and modeling of computer systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109054992","display_name":"Abhinav Pathak","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Abhinav Pathak","raw_affiliation_strings":["Purdue University, West Lafayette, USA","Purdue University, West lafayette, USA"],"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, USA","institution_ids":["https://openalex.org/I219193219"]},{"raw_affiliation_string":"Purdue University, West lafayette, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072962093","display_name":"Feng Qian","orcid":"https://orcid.org/0000-0001-8509-2650"},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan\u2013Ann Arbor","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Feng Qian","raw_affiliation_strings":["University of Michigan, Ann Arbor, USA","University of Michigan , Ann Arbor , USA"],"affiliations":[{"raw_affiliation_string":"University of Michigan, Ann Arbor, USA","institution_ids":["https://openalex.org/I27837315"]},{"raw_affiliation_string":"University of Michigan , Ann Arbor , USA","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103272749","display_name":"Y. Charlie Hu","orcid":"https://orcid.org/0009-0008-4773-5115"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Y. Charlie Hu","raw_affiliation_strings":["Purdue University, West Lafayette, USA","Purdue University, West lafayette, USA"],"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, USA","institution_ids":["https://openalex.org/I219193219"]},{"raw_affiliation_string":"Purdue University, West lafayette, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003217329","display_name":"Z. Morley Mao","orcid":"https://orcid.org/0000-0002-9844-2055"},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan\u2013Ann Arbor","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Z. Morley Mao","raw_affiliation_strings":["University of Michigan, Ann Arbor, USA","University of Michigan , Ann Arbor , USA"],"affiliations":[{"raw_affiliation_string":"University of Michigan, Ann Arbor, USA","institution_ids":["https://openalex.org/I27837315"]},{"raw_affiliation_string":"University of Michigan , Ann Arbor , USA","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113442080","display_name":"Supranamaya Ranjan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Supranamaya Ranjan","raw_affiliation_strings":["Narus, Inc., Mountain View, USA","Narus, Inc., Mountain View, USA#TAB#"],"affiliations":[{"raw_affiliation_string":"Narus, Inc., Mountain View, USA","institution_ids":[]},{"raw_affiliation_string":"Narus, Inc., Mountain View, USA#TAB#","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5109054992"],"corresponding_institution_ids":["https://openalex.org/I219193219"],"apc_list":null,"apc_paid":null,"fwci":10.3642,"has_fulltext":false,"cited_by_count":45,"citation_normalized_percentile":{"value":0.97966389,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"13","last_page":"24"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/spamming","display_name":"Spamming","score":0.9790005683898926},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.8942002058029175},{"id":"https://openalex.org/keywords/forum-spam","display_name":"Forum spam","score":0.7384381294250488},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6995647549629211},{"id":"https://openalex.org/keywords/spambot","display_name":"Spambot","score":0.6828827857971191},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.45144978165626526},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4207797050476074},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.24453720450401306},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2107650339603424},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.19494786858558655}],"concepts":[{"id":"https://openalex.org/C158955206","wikidata":"https://www.wikidata.org/wiki/Q83058","display_name":"Spamming","level":3,"score":0.9790005683898926},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8942002058029175},{"id":"https://openalex.org/C157310412","wikidata":"https://www.wikidata.org/wiki/Q3140915","display_name":"Forum spam","level":5,"score":0.7384381294250488},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6995647549629211},{"id":"https://openalex.org/C127735637","wikidata":"https://www.wikidata.org/wiki/Q2306702","display_name":"Spambot","level":4,"score":0.6828827857971191},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.45144978165626526},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4207797050476074},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.24453720450401306},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2107650339603424},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.19494786858558655}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1555349.1555352","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1555349.1555352","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the eleventh international joint conference on Measurement and modeling of computer systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W91409086","https://openalex.org/W1500507701","https://openalex.org/W1590936031","https://openalex.org/W1593657937","https://openalex.org/W1593743365","https://openalex.org/W1925668703","https://openalex.org/W2091692346","https://openalex.org/W2108214308","https://openalex.org/W2112063328","https://openalex.org/W2113344319","https://openalex.org/W2139577842","https://openalex.org/W2152565070","https://openalex.org/W4233802931","https://openalex.org/W4237690029","https://openalex.org/W6635272604","https://openalex.org/W6635537036"],"related_works":["https://openalex.org/W2018000323","https://openalex.org/W2006090454","https://openalex.org/W2095720311","https://openalex.org/W2403960249","https://openalex.org/W2898345088","https://openalex.org/W2080521416","https://openalex.org/W1937320931","https://openalex.org/W1502194589","https://openalex.org/W4293384513","https://openalex.org/W1481472066"],"abstract_inverted_index":{"Accurately":[0],"identifying":[1,96],"spam":[2,17,35,71,122,128,155,185],"campaigns":[3,97,123],"launched":[4],"by":[5,51,109],"a":[6,12,45,64,105,110,174],"large":[7,160],"number":[8],"of":[9,32,57,67,70,78,125,181,194],"bots":[10],"in":[11,80,95,173],"botnet":[13,121],"allows":[14],"for":[15],"accurate":[16],"campaign":[18,46,100,186],"signature":[19,187],"generation":[20],"and":[21,75,85,98,116,143,209],"hence":[22],"is":[23],"critical":[24],"to":[25,82,145],"defeating":[26],"spamming":[27,141,213],"botnets.":[28],"The":[29],"straight-forward":[30],"approach":[31],"clustering":[33,93],"all":[34],"containing":[36],"the":[37,90,154,168,179,212],"same":[38],"label":[39],"such":[40,53],"as":[41,54,171],"an":[42],"URL":[43],"into":[44],"can":[47,88],"be":[48],"easily":[49],"defeated":[50],"techniques":[52],"simple":[55,91],"obfuscations":[56],"URLs.":[58],"In":[59,102],"this":[60,182],"paper,":[61],"we":[62,113],"perform":[63],"comprehensive":[65],"study":[66,191],"content-agnostic":[68],"characteristics":[69,193],"campaigns,":[72,156],"e.g.":[73],"duration":[74],"source-network":[76],"distribution":[77],"spammers,":[79],"order":[81],"ascertain":[83],"whether":[84],"how":[86],"they":[87],"assist":[89],"label-based":[92],"methods":[94],"generating":[99],"signatures.":[101],"particular,":[103],"from":[104,137,159],"five-month":[106],"trace":[107],"collected":[108],"relay":[111],"sinkhole,":[112],"manually":[114],"identified":[115],"then":[117],"analyzed":[118],"seven":[119],"URL-based":[120],"consisting":[124],"52":[126],"million":[127,133],"messages":[129],"sent":[130],"over":[131,138],"2.09":[132],"SMTP":[134],"connections":[135],"originated":[136],"150,000":[139],"non-proxy":[140],"hosts":[142],"destined":[144],"about":[146],"200,000":[147],"end":[148],"domains.":[149],"Our":[150,198],"analysis":[151,199],"shows":[152],"that":[153],"when":[157],"observed":[158],"destination":[161],"domains,":[162],"exhibit":[163],"durations":[164],"far":[165],"longer":[166],"than":[167],"five-day":[169],"period":[170],"reported":[172],"recent":[175],"study.":[176],"We":[177,189],"analyze":[178],"implications":[180],"finding":[183],"on":[184],"generation.":[188],"further":[190],"other":[192],"these":[195],"long-lasting":[196],"campaigns.":[197],"reveals":[200],"several":[201],"new":[202],"findings":[203],"regarding":[204],"workload":[205],"distribution,":[206],"sending":[207],"patterns,":[208],"coordination":[210],"among":[211],"machines.":[214]},"counts_by_year":[{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":7},{"year":2013,"cited_by_count":9},{"year":2012,"cited_by_count":5}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}