{"id":"https://openalex.org/W2160289821","doi":"https://doi.org/10.1145/1963405.1963436","title":"Prophiler","display_name":"Prophiler","publication_year":2011,"publication_date":"2011-03-28","ids":{"openalex":"https://openalex.org/W2160289821","doi":"https://doi.org/10.1145/1963405.1963436","mag":"2160289821"},"language":"en","primary_location":{"id":"doi:10.1145/1963405.1963436","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1963405.1963436","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 20th international conference on World wide web","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hal.science/hal-00727271","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109794137","display_name":"Davide Canali","orcid":null},"institutions":[{"id":"https://openalex.org/I1902872","display_name":"EURECOM","ror":"https://ror.org/00sse7z02","country_code":"FR","type":"education","lineage":["https://openalex.org/I1902872","https://openalex.org/I205703379"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Davide Canali","raw_affiliation_strings":["Institute Eurecom, Sophia Antipolis, France","Eurecom [Sophia Antipolis] (Campus SophiaTech, 450 Route des Chappes, CS 50193 - 06904 Biot Sophia Antipolis cedex - France)"],"affiliations":[{"raw_affiliation_string":"Institute Eurecom, Sophia Antipolis, France","institution_ids":["https://openalex.org/I1902872"]},{"raw_affiliation_string":"Eurecom [Sophia Antipolis] (Campus SophiaTech, 450 Route des Chappes, CS 50193 - 06904 Biot Sophia Antipolis cedex - France)","institution_ids":["https://openalex.org/I1902872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006916505","display_name":"Marco Cova","orcid":null},"institutions":[{"id":"https://openalex.org/I79619799","display_name":"University of Birmingham","ror":"https://ror.org/03angcq70","country_code":"GB","type":"education","lineage":["https://openalex.org/I79619799"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Marco Cova","raw_affiliation_strings":["University of Birmingham, Birmingham, United Kingdom","School of Computer Science [Birmingham] (The University of Birmingham, Edgbaston, Birmingham, B15 2TT, United Kingdom - United Kingdom)"],"affiliations":[{"raw_affiliation_string":"University of Birmingham, Birmingham, United Kingdom","institution_ids":["https://openalex.org/I79619799"]},{"raw_affiliation_string":"School of Computer Science [Birmingham] (The University of Birmingham, Edgbaston, Birmingham, B15 2TT, United Kingdom - United Kingdom)","institution_ids":["https://openalex.org/I79619799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Giovanni Vigna","raw_affiliation_strings":["University of California, Santa Barbara, Santa Barbara, CA, USA","CS-UCSB - Department of Computer Science [Santa Barbara] (College of Engineering, UC, Santa Barbara, CA 93106-5110 - United States)"],"affiliations":[{"raw_affiliation_string":"University of California, Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]},{"raw_affiliation_string":"CS-UCSB - Department of Computer Science [Santa Barbara] (College of Engineering, UC, Santa Barbara, CA 93106-5110 - United States)","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["University of California, Santa Barbara, Santa Barbara, CA, USA","CS-UCSB - Department of Computer Science [Santa Barbara] (College of Engineering, UC, Santa Barbara, CA 93106-5110 - United States)"],"affiliations":[{"raw_affiliation_string":"University of California, Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]},{"raw_affiliation_string":"CS-UCSB - Department of Computer Science [Santa Barbara] (College of Engineering, UC, Santa Barbara, CA 93106-5110 - United States)","institution_ids":["https://openalex.org/I154570441"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5109794137"],"corresponding_institution_ids":["https://openalex.org/I1902872"],"apc_list":null,"apc_paid":null,"fwci":76.2585,"has_fulltext":false,"cited_by_count":332,"citation_normalized_percentile":{"value":0.99917263,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"197","last_page":"206"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.826762318611145},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7983701229095459},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.7296719551086426},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.7269080877304077},{"id":"https://openalex.org/keywords/client-side-scripting","display_name":"Client-side scripting","score":0.6815046668052673},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.6605638265609741},{"id":"https://openalex.org/keywords/plug-in","display_name":"Plug-in","score":0.6340500116348267},{"id":"https://openalex.org/keywords/dynamic-web-page","display_name":"Dynamic web page","score":0.5673596858978271},{"id":"https://openalex.org/keywords/download","display_name":"Download","score":0.5570053458213806},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5503838658332825},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5210434794425964},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.45802175998687744},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.44683390855789185},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4439709484577179},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.41729700565338135},{"id":"https://openalex.org/keywords/static-web-page","display_name":"Static web page","score":0.3872286081314087},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3048288822174072},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.2851932644844055},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.2525932192802429},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.19146275520324707}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.826762318611145},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7983701229095459},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.7296719551086426},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.7269080877304077},{"id":"https://openalex.org/C195274430","wikidata":"https://www.wikidata.org/wiki/Q1650567","display_name":"Client-side scripting","level":5,"score":0.6815046668052673},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.6605638265609741},{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.6340500116348267},{"id":"https://openalex.org/C100158260","wikidata":"https://www.wikidata.org/wiki/Q1650567","display_name":"Dynamic web page","level":3,"score":0.5673596858978271},{"id":"https://openalex.org/C2780154274","wikidata":"https://www.wikidata.org/wiki/Q7126717","display_name":"Download","level":2,"score":0.5570053458213806},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5503838658332825},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5210434794425964},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.45802175998687744},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.44683390855789185},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4439709484577179},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.41729700565338135},{"id":"https://openalex.org/C173576120","wikidata":"https://www.wikidata.org/wiki/Q2641220","display_name":"Static web page","level":4,"score":0.3872286081314087},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3048288822174072},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.2851932644844055},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.2525932192802429},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19146275520324707}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/1963405.1963436","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1963405.1963436","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 20th international conference on World wide web","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-00727271v1","is_oa":true,"landing_page_url":"https://hal.science/hal-00727271","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 20th international conference on World wide web, Mar 2011, Hyderabad, India. pp.197--206, ⟨10.1145/1963405.1963436⟩","raw_type":"Conference papers"},{"id":"pmh:oai:pure.atira.dk:openaire_cris_publications/4bb9f6b3-7831-4606-8b9d-c234e659e60d","is_oa":false,"landing_page_url":"https://research.birmingham.ac.uk/en/publications/4bb9f6b3-7831-4606-8b9d-c234e659e60d","pdf_url":null,"source":{"id":"https://openalex.org/S4306402634","display_name":"University of Birmingham Research Portal (University of Birmingham)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79619799","host_organization_name":"University of Birmingham","host_organization_lineage":["https://openalex.org/I79619799"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Canali, D, Cova, M, Vigna, G & Kruegel, C 2011, Prophiler: a Fast Filter for the Large-Scale Detection of Malicious Web Pages. in Proceedings of the 20th international conference on World wide web. Association for Computing Machinery , pp. 197-206, International Conference on World Wide Web (WWW '11), 20th, New York, United States, 1/04/11. https://doi.org/10.1145/1963405.1963436","raw_type":"contributionToPeriodical"},{"id":"pmh:oai:pure.atira.dk:publications/4bb9f6b3-7831-4606-8b9d-c234e659e60d","is_oa":false,"landing_page_url":"https://research.birmingham.ac.uk/portal/en/publications/prophiler-a-fast-filter-for-the-largescale-detection-of-malicious-web-pages(4bb9f6b3-7831-4606-8b9d-c234e659e60d).html","pdf_url":null,"source":{"id":"https://openalex.org/S4306402634","display_name":"University of Birmingham Research Portal (University of Birmingham)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79619799","host_organization_name":"University of Birmingham","host_organization_lineage":["https://openalex.org/I79619799"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Canali, D, Cova, M, Vigna, G & Kruegel, C 2011, Prophiler: a Fast Filter for the Large-Scale Detection of Malicious Web Pages. in Proceedings of the 20th international conference on World wide web. Association for Computing Machinery , pp. 197-206, International Conference on World Wide Web (WWW '11), 20th, New York, United States, 1/04/11. https://doi.org/10.1145/1963405.1963436","raw_type":"contributionToPeriodical"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-00727271v1","is_oa":true,"landing_page_url":"https://hal.science/hal-00727271","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 20th international conference on World wide web, Mar 2011, Hyderabad, India. pp.197--206, ⟨10.1145/1963405.1963436⟩","raw_type":"Conference papers"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.8100000023841858,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W40177048","https://openalex.org/W200926709","https://openalex.org/W1520941164","https://openalex.org/W1970867218","https://openalex.org/W1985987493","https://openalex.org/W1987644478","https://openalex.org/W2044675702","https://openalex.org/W2053774863","https://openalex.org/W2095610745","https://openalex.org/W2100307718","https://openalex.org/W2101210513","https://openalex.org/W2111165162","https://openalex.org/W2113167642","https://openalex.org/W2133990480","https://openalex.org/W2146729596","https://openalex.org/W2151401368","https://openalex.org/W6601628813","https://openalex.org/W6674628898","https://openalex.org/W6676915735"],"related_works":["https://openalex.org/W2187721372","https://openalex.org/W2324487656","https://openalex.org/W195594203","https://openalex.org/W2368657441","https://openalex.org/W581910518","https://openalex.org/W3108406630","https://openalex.org/W580610870","https://openalex.org/W2059725703","https://openalex.org/W406631474","https://openalex.org/W2772885702"],"abstract_inverted_index":{"Malicious":[0],"web":[1,40,76,100,160],"pages":[2,77,161],"that":[3,74],"host":[4],"drive-by-download":[5,26,65],"exploits":[6],"have":[7,68],"become":[8],"a":[9,25,31,39,43,70,99,105,110,148,156],"popular":[10],"means":[11],"for":[12,20,78,124,147],"compromising":[13],"hosts":[14],"on":[15,155],"the":[16,48,56,79,95,121,128,133,141],"Internet":[17],"and,":[18],"subsequently,":[19],"creating":[21],"large-scale":[22],"botnets.":[23],"In":[24],"exploit,":[27],"an":[28,115],"attacker":[29],"embeds":[30],"malicious":[32,82,125],"script":[33,49],"(typically":[34],"written":[35],"in":[36,104,109,114,140],"JavaScript)":[37],"into":[38],"page.":[41,150],"When":[42],"victim":[44],"visits":[45],"this":[46,153],"page,":[47],"is":[50,136],"executed":[51],"and":[52,118],"attempts":[53],"to":[54],"compromise":[55],"browser":[57,107],"or":[58,113],"one":[59],"of":[60,72,81,85,143,145,159,164,166],"its":[61],"plugins.":[62],"To":[63],"detect":[64],"exploits,":[66],"researchers":[67],"developed":[69],"number":[71],"systems":[73,87],"analyze":[75],"presence":[80],"code.":[83],"Most":[84],"these":[86],"use":[88],"dynamic":[89],"analysis.":[90],"That":[91],"is,":[92],"they":[93,119],"run":[94],"scripts":[96],"associated":[97],"with":[98],"page":[101],"either":[102],"directly":[103],"real":[106],"(running":[108],"virtualized":[111],"environment)":[112],"emulated":[116],"browser,":[117],"monitor":[120],"scripts'":[122],"executions":[123],"activity.":[126],"While":[127],"tools":[129],"are":[130],"quite":[131],"precise,":[132],"analysis":[134,154],"process":[135],"costly,":[137],"often":[138],"requiring":[139],"order":[142],"tens":[144],"seconds":[146],"single":[149],"Therefore,":[151],"performing":[152],"large":[157],"set":[158],"containing":[162],"hundreds":[163],"millions":[165],"samples":[167],"can":[168],"be":[169],"prohibitive.":[170]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":17},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":23},{"year":2020,"cited_by_count":22},{"year":2019,"cited_by_count":24},{"year":2018,"cited_by_count":23},{"year":2017,"cited_by_count":26},{"year":2016,"cited_by_count":27},{"year":2015,"cited_by_count":37},{"year":2014,"cited_by_count":37},{"year":2013,"cited_by_count":35},{"year":2012,"cited_by_count":20}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2016-06-24T00:00:00"}