{"id":"https://openalex.org/W2072374814","doi":"https://doi.org/10.1145/1562164.1562190","title":"Spamalytics","display_name":"Spamalytics","publication_year":2009,"publication_date":"2009-08-25","ids":{"openalex":"https://openalex.org/W2072374814","doi":"https://doi.org/10.1145/1562164.1562190","mag":"2072374814"},"language":"en","primary_location":{"id":"doi:10.1145/1562164.1562190","is_oa":true,"landing_page_url":"https://doi.org/10.1145/1562164.1562190","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/1562164.1562190","source":{"id":"https://openalex.org/S103482838","display_name":"Communications of the ACM","issn_l":"0001-0782","issn":["0001-0782","1557-7317"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications of the ACM","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/1562164.1562190","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070578895","display_name":"Chris Kanich","orcid":"https://orcid.org/0000-0002-3836-2168"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chris Kanich","raw_affiliation_strings":["Department of Computer Science and Engineering University of California, San Diego","[Department of Computer Science and Engineering, University of California, San Diego]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering University of California, San Diego","institution_ids":["https://openalex.org/I36258959"]},{"raw_affiliation_string":"[Department of Computer Science and Engineering, University of California, San Diego]","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024267292","display_name":"Christian Kreibich","orcid":null},"institutions":[{"id":"https://openalex.org/I1297971548","display_name":"International Computer Science Institute","ror":"https://ror.org/01ewh7m12","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1297971548"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christian Kreibich","raw_affiliation_strings":["International Computer Science Institute Berkeley","International Computer Science Institute [Berkeley]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"International Computer Science Institute Berkeley","institution_ids":["https://openalex.org/I1297971548"]},{"raw_affiliation_string":"International Computer Science Institute [Berkeley]","institution_ids":["https://openalex.org/I1297971548"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024587249","display_name":"Kirill Levchenko","orcid":"https://orcid.org/0000-0003-4527-9749"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kirill Levchenko","raw_affiliation_strings":["Department of Computer Science and Engineering University of California, San Diego","[Department of Computer Science and Engineering, University of California, San Diego]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering University of California, San Diego","institution_ids":["https://openalex.org/I36258959"]},{"raw_affiliation_string":"[Department of Computer Science and Engineering, University of California, San Diego]","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013024456","display_name":"Brandon Enright","orcid":"https://orcid.org/0009-0006-0239-2257"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brandon Enright","raw_affiliation_strings":["Department of Computer Science and Engineering University of California, San Diego","[Department of Computer Science and Engineering, University of California, San Diego]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering University of California, San Diego","institution_ids":["https://openalex.org/I36258959"]},{"raw_affiliation_string":"[Department of Computer Science and Engineering, University of California, San Diego]","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081366293","display_name":"Geoffrey M. Voelker","orcid":"https://orcid.org/0000-0003-0865-7499"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Geoffrey M. Voelker","raw_affiliation_strings":["Department of Computer Science and Engineering University of California, San Diego","[Department of Computer Science and Engineering, University of California, San Diego]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering University of California, San Diego","institution_ids":["https://openalex.org/I36258959"]},{"raw_affiliation_string":"[Department of Computer Science and Engineering, University of California, San Diego]","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002219113","display_name":"Vern Paxson","orcid":"https://orcid.org/0009-0005-2673-543X"},"institutions":[{"id":"https://openalex.org/I1297971548","display_name":"International Computer Science Institute","ror":"https://ror.org/01ewh7m12","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1297971548"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vern Paxson","raw_affiliation_strings":["International Computer Science Institute Berkeley","International Computer Science Institute [Berkeley]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"International Computer Science Institute Berkeley","institution_ids":["https://openalex.org/I1297971548"]},{"raw_affiliation_string":"International Computer Science Institute [Berkeley]","institution_ids":["https://openalex.org/I1297971548"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048394730","display_name":"Stefan Savage","orcid":"https://orcid.org/0000-0001-6617-8029"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stefan Savage","raw_affiliation_strings":["Department of Computer Science and Engineering University of California, San Diego","[Department of Computer Science and Engineering, University of California, San Diego]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering University of California, San Diego","institution_ids":["https://openalex.org/I36258959"]},{"raw_affiliation_string":"[Department of Computer Science and Engineering, University of California, San Diego]","institution_ids":["https://openalex.org/I36258959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":18.5139,"has_fulltext":false,"cited_by_count":52,"citation_normalized_percentile":{"value":0.99017277,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"52","issue":"9","first_page":"99","last_page":"107"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9851999878883362,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/forum-spam","display_name":"Forum spam","score":0.6893795132637024},{"id":"https://openalex.org/keywords/spamming","display_name":"Spamming","score":0.6421874761581421},{"id":"https://openalex.org/keywords/spambot","display_name":"Spambot","score":0.5475467443466187},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.48945701122283936},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.42922306060791016},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.407065212726593},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3911442756652832},{"id":"https://openalex.org/keywords/advertising","display_name":"Advertising","score":0.37400421500205994},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.36852243542671204},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2820241153240204}],"concepts":[{"id":"https://openalex.org/C157310412","wikidata":"https://www.wikidata.org/wiki/Q3140915","display_name":"Forum spam","level":5,"score":0.6893795132637024},{"id":"https://openalex.org/C158955206","wikidata":"https://www.wikidata.org/wiki/Q83058","display_name":"Spamming","level":3,"score":0.6421874761581421},{"id":"https://openalex.org/C127735637","wikidata":"https://www.wikidata.org/wiki/Q2306702","display_name":"Spambot","level":4,"score":0.5475467443466187},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.48945701122283936},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.42922306060791016},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.407065212726593},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3911442756652832},{"id":"https://openalex.org/C112698675","wikidata":"https://www.wikidata.org/wiki/Q37038","display_name":"Advertising","level":1,"score":0.37400421500205994},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.36852243542671204},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2820241153240204}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1562164.1562190","is_oa":true,"landing_page_url":"https://doi.org/10.1145/1562164.1562190","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/1562164.1562190","source":{"id":"https://openalex.org/S103482838","display_name":"Communications of the ACM","issn_l":"0001-0782","issn":["0001-0782","1557-7317"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications of the ACM","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/1562164.1562190","is_oa":true,"landing_page_url":"https://doi.org/10.1145/1562164.1562190","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/1562164.1562190","source":{"id":"https://openalex.org/S103482838","display_name":"Communications of the ACM","issn_l":"0001-0782","issn":["0001-0782","1557-7317"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Communications of the ACM","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8786810966","display_name":null,"funder_award_id":"NSF-0433702NSF-0433668","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320316785","display_name":"VMware","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W1590936031","https://openalex.org/W1593743365","https://openalex.org/W1787296045","https://openalex.org/W1857870385","https://openalex.org/W2029535677","https://openalex.org/W2131489433","https://openalex.org/W2408723505","https://openalex.org/W3123510220"],"related_works":["https://openalex.org/W2018000323","https://openalex.org/W2095720311","https://openalex.org/W2403960249","https://openalex.org/W2898345088","https://openalex.org/W2080521416","https://openalex.org/W1937320931","https://openalex.org/W2075252441","https://openalex.org/W1502194589","https://openalex.org/W1965586806","https://openalex.org/W4293384513"],"abstract_inverted_index":{"Spam-based":[0],"marketing":[1,269],"is":[2,12,63,77,195,298,327,348,400,529,534,576],"a":[3,19,31,113,227,272,293,304,375,403,447,563],"curious":[4],"beast.":[5],"We":[6,522,633],"all":[7],"receive":[8,496],"the":[9,35,81,103,155,200,205,209,216,230,251,260,274,318,340,361,368,394,416,439,450,471,482,492,548,583,616,627],"advertisements---\"Excellent":[10],"hardness":[11],"easy!\"---but":[13],"few":[14],"of":[15,47,50,106,164,180,187,204,239,284,286,296,306,313,317,363,382,432,449,481,526,559,573,618],"us":[16],"have":[17,409,512],"encountered":[18],"person":[20],"who":[21],"admits":[22],"to":[23,125,128,135,211,301,344,349,366,397,401,445,460,470,547,562],"following":[24],"through":[25,259],"on":[26,250,279,620,630],"this":[27,170,325,346,406,412,509,527,574,593],"offer":[28],"and":[29,71,86,102,134,162,229,237,243,258,262,358,388,419,556,588,610,623,640],"making":[30],"purchase.":[32],"And":[33],"yet,":[34],"relentlessness":[36],"by":[37,154,215,254,266,536],"which":[38],"such":[39,75,374,500],"spam":[40,85,131,152,206,256,319,337,399,451,515,528,587,608,621,631],"continually":[41],"clogs":[42],"Internet":[43,287],"inboxes,":[44],"despite":[45],"years":[46],"energetic":[48],"deployment":[49],"antispam":[51,538],"technology,":[52],"provides":[53],"undeniable":[54],"testament":[55],"that":[56,151,220,489],"spammers":[57,95],"find":[58],"their":[59,107,380],"campaigns":[60,132,516],"profitable.":[61,140],"Someone":[62],"clearly":[64],"buying.":[65],"But":[66],"how":[67,69,72,129,524,532,543,557],"many,":[68],"often,":[70],"much?":[73],"Unraveling":[74],"questions":[76],"essential":[78],"for":[79,84,334,385,586,601],"understanding":[80],"economic":[82,584],"support":[83],"hence":[87],"where":[88],"any":[89,181,314,457],"structural":[90],"weaknesses":[91],"may":[92],"lie.":[93],"Unfortunately,":[94],"do":[96,289],"not":[97],"file":[98],"quarterly":[99],"financial":[100],"reports,":[101],"underground":[104],"nature":[105],"activities":[108],"makes":[109,430],"third-party":[110,255],"data":[111,183,347],"gathering":[112],"challenge":[114],"at":[115,245],"best.":[116],"Absent":[117],"an":[118,221,351,433],"empirical":[119],"foundation,":[120],"defenders":[121],"are":[122,133,139,178,241,311,330],"often":[123],"left":[124],"speculate":[126],"as":[127,149,501,578],"successful":[130],"what":[136,282],"degree":[137],"they":[138],"For":[141],"example,":[142],"IBM's":[143],"Joshua":[144],"Corman":[145],"was":[146,159],"widely":[147],"quoted":[148],"claiming":[150],"sent":[153,223],"Storm":[156],"worm":[157],"alone":[158],"generating":[160],"\"millions":[161],"millions":[163,285],"dollars":[165],"every":[166],"day.\"":[167],"1":[168],"While":[169,303],"claim":[171],"could":[172],"in":[173,592,637],"fact":[174],"be":[175,247,402],"true,":[176],"we":[177,310,408,442,511],"unaware":[179,312],"public":[182],"or":[184,189,495,504,565],"methodology":[185,600],"capable":[186],"confirming":[188],"refuting":[190],"it.":[191],"The":[192,235,571],"key":[193],"problem":[194,326],"our":[196,428,464,475,598,607,635],"limited":[197],"visibility":[198],"into":[199],"three":[201,514],"basic":[202],"parameters":[203],"value":[207],"proposition:":[208],"cost":[210],"send":[212],"spam,":[213,357],"offset":[214],"\"conversion":[217],"rate\"":[218],"(probability":[219],"email":[222,387],"will":[224],"ultimately":[225],"yield":[226],"\"sale\"),":[228],"marginal":[231],"profit":[232],"per":[233],"sale.":[234],"first":[236],"last":[238],"these":[240],"self-contained":[242],"can":[244],"least":[246],"estimated":[248],"based":[249],"costs":[252],"charged":[253],"senders":[257],"pricing":[261],"gross":[263],"margins":[264],"offered":[265],"various":[267],"Interne":[268],"\"affiliate":[270],"programs.\"":[271],"However,":[273],"conversion":[275,320,568,611],"rate":[276,554,569],"depends":[277],"fundamentally":[278],"group":[280],"actions---on":[281],"hundreds":[283],"users":[288,545],"when":[290],"confronted":[291],"with":[292,371,423,486],"new":[294],"piece":[295],"spam---and":[297],"much":[299,525,533],"harder":[300],"obtain.":[302],"range":[305],"anecdotal":[307],"numbers":[308],"exist,":[309],"well-documented":[315],"measurement":[316],"rate.":[321],"b":[322],"In":[323,392,405,473],"part,":[324],"methodological.":[328],"There":[329],"no":[331],"apparent":[332],"methods":[333],"indirectly":[335],"measuring":[336],"conversion.":[338],"Thus,":[339],"only":[341],"obvious":[342,417],"way":[343,396],"extract":[345],"build":[350],"e-commerce":[352],"site,":[353],"market":[354],"it":[355,444,452],"via":[356],"then":[359],"record":[360],"number":[362],"sales.":[364],"Moreover,":[365],"capture":[367],"spammer's":[369,483],"experience":[370],"full":[372],"fidelity,":[373],"study":[376,429],"must":[377],"also":[378],"mimic":[379],"use":[381,431],"illicit":[383],"botnets":[384],"distributing":[386],"proxying":[389],"user":[390],"responses.":[391,632],"effect,":[393],"best":[395],"measure":[398],"spammer.":[404,472],"paper,":[407],"effectively":[410],"conducted":[411],"study,":[413],"though":[414],"sidestepping":[415],"legal":[418],"ethical":[420],"problems":[421],"associated":[422],"sending":[424],"spam.":[425],"c":[426],"Critically,":[427],"existing":[434],"spamming":[435],"botnet.":[436],"By":[437],"infiltrating":[438],"botnet":[440,602],"parasitically,":[441],"convinced":[443],"modify":[446],"subset":[448],"already":[453],"sends,":[454],"thereby":[455],"directing":[456],"interested":[458],"recipients":[459],"Web":[461,476],"sites":[462,477],"under":[463],"control,":[465],"rather":[466],"than":[467],"those":[468,560],"belonging":[469],"turn,":[474],"presented":[478],"\"defanged\"":[479],"versions":[480],"own":[484],"sites,":[485],"functionality":[487],"removed":[488],"would":[490],"compromise":[491],"victim's":[493],"system":[494],"sensitive":[497],"personal":[498],"information":[499],"name,":[502],"address":[503],"credit":[505],"card":[506],"information.":[507],"Using":[508],"methodology,":[510],"documented":[513],"comprising":[517],"over":[518],"469":[519],"million":[520],"emails.":[521],"identified":[523],"successfully":[530],"delivered,":[531],"filtered":[535],"popular":[537],"solutions,":[539],"and,":[540],"most":[541],"importantly,":[542],"many":[544,558],"\"click-through\"":[546],"site":[549],"being":[550],"advertised":[551],"(":[552,567],"response":[553],")":[555],"progress":[561],"\"sale\"":[564],"\"infection\"":[566],").":[570],"remainder":[572],"paper":[575],"structured":[577],"follows.":[579],"Section":[580,595,604,613,624,638],"2":[581],"describes":[582,597,606],"basis":[585],"reviews":[589],"prior":[590],"research":[591],"area.":[594],"4":[596],"experimental":[599],"infiltration.":[603],"5":[605],"filtering":[609],"results,":[612],"6":[614],"analyzes":[615,626],"effects":[617],"blacklisting":[619],"delivery,":[622],"7":[625],"possible":[628],"influences":[629],"synthesize":[634],"findings":[636],"8":[639],"conclude.":[641]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":4},{"year":2013,"cited_by_count":8},{"year":2012,"cited_by_count":7}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2016-06-24T00:00:00"}