{"id":"https://openalex.org/W1990188874","doi":"https://doi.org/10.1145/2019599.2019606","title":"CANTINA+","display_name":"CANTINA+","publication_year":2011,"publication_date":"2011-09-01","ids":{"openalex":"https://openalex.org/W1990188874","doi":"https://doi.org/10.1145/2019599.2019606","mag":"1990188874"},"language":"en","primary_location":{"id":"doi:10.1145/2019599.2019606","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2019599.2019606","pdf_url":null,"source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029285921","display_name":"Guang Xiang","orcid":null},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Guang Xiang","raw_affiliation_strings":["Carnegie Mellon University"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090310268","display_name":"Jason Hong","orcid":"https://orcid.org/0000-0002-9856-9654"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jason Hong","raw_affiliation_strings":["Carnegie Mellon University"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089539629","display_name":"Carolyn Penstein Ros\u00e9","orcid":"https://orcid.org/0000-0003-1128-5155"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Carolyn P. Rose","raw_affiliation_strings":["Carnegie Mellon University"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072760035","display_name":"Lorrie Faith Cranor","orcid":"https://orcid.org/0000-0003-2125-0124"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lorrie Cranor","raw_affiliation_strings":["Carnegie Mellon University"],"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University","institution_ids":["https://openalex.org/I74973139"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5029285921"],"corresponding_institution_ids":["https://openalex.org/I74973139"],"apc_list":null,"apc_paid":null,"fwci":52.7475,"has_fulltext":false,"cited_by_count":484,"citation_normalized_percentile":{"value":0.99840911,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"14","issue":"2","first_page":"1","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12016","display_name":"Web Data Mining and Analysis","score":0.9883999824523926,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7372457385063171},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5941201448440552},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2790204882621765}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7372457385063171},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5941201448440552},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2790204882621765}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2019599.2019606","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2019599.2019606","pdf_url":null,"source":{"id":"https://openalex.org/S2642811","display_name":"ACM Transactions on Information and System Security","issn_l":"1094-9224","issn":["1094-9224","1557-7406"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Information and System Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2548277419","display_name":null,"funder_award_id":"CCF-0524189","funder_id":"https://openalex.org/F4320337387","funder_display_name":"Division of Computing and Communication Foundations"},{"id":"https://openalex.org/G6792213519","display_name":null,"funder_award_id":"DAAD 19-02-1-0389","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"}],"funders":[{"id":"https://openalex.org/F4320337387","display_name":"Division of Computing and Communication Foundations","ror":"https://ror.org/01mng8331"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W192036632","https://openalex.org/W1570448133","https://openalex.org/W1577173673","https://openalex.org/W1593211785","https://openalex.org/W1606590080","https://openalex.org/W1607915502","https://openalex.org/W1977776704","https://openalex.org/W2002964284","https://openalex.org/W2010608681","https://openalex.org/W2023973750","https://openalex.org/W2025635041","https://openalex.org/W2029350345","https://openalex.org/W2053774863","https://openalex.org/W2059201166","https://openalex.org/W2100486461","https://openalex.org/W2117285489","https://openalex.org/W2120100126","https://openalex.org/W2134750673","https://openalex.org/W2139212933","https://openalex.org/W2139532006","https://openalex.org/W2139565456","https://openalex.org/W2142261479","https://openalex.org/W2147495097","https://openalex.org/W2154586245","https://openalex.org/W2158698691","https://openalex.org/W2160353917","https://openalex.org/W2161020477","https://openalex.org/W2166731089","https://openalex.org/W2894806357","https://openalex.org/W2966207845","https://openalex.org/W3193477162"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W1557094818","https://openalex.org/W2183246718","https://openalex.org/W2099261052","https://openalex.org/W3209204065","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2105707930"],"abstract_inverted_index":{"Phishing":[0],"is":[1,27,152,167],"a":[2,57,69,79,94,153,168,192,264,284],"plague":[3],"in":[4,29,109],"cyberspace.":[5],"Typically,":[6],"phish":[7,155,199,217,262],"detection":[8],"methods":[9,190],"either":[10],"use":[11],"human-verified":[12],"URL":[13],"blacklists":[14],"or":[15],"exploit":[16],"Web":[17,175,203],"page":[18],"features":[19,43,73],"via":[20,97],"machine":[21,75,131],"learning":[22,76,132],"techniques.":[23],"However,":[24],"the":[25,35,39,45,66,91,104,110,118,206,235],"former":[26],"frail":[28],"terms":[30],"of":[31,41,68,72,195,269],"new":[32],"phish,":[33,87,225,247,254],"and":[34,44,88,126,146,200,218,226,255,273],"latter":[36],"suffers":[37],"from":[38],"scarcity":[40],"effective":[42],"high":[46,80],"false":[47],"positive":[48,82],"rate":[49,83],"(FP).":[50],"To":[51],"alleviate":[52],"those":[53],"problems,":[54],"we":[55,101,138],"propose":[56],"layered":[58],"anti-phishing":[59,286],"solution":[60],"that":[61,157],"aims":[62],"at":[63],"(1)":[64],"exploiting":[65],"expressiveness":[67],"rich":[70],"set":[71],"with":[74,130,177,188,197,230,263],"to":[77,93,134,142,160,282],"achieve":[78,147],"true":[81],"(TP)":[84],"on":[85,191,214,222,244,251],"novel":[86,114],"(2)":[89],"limiting":[90],"FP":[92,145,229,258,272],"low":[95],"level":[96],"filtering":[98],"algorithms.":[99],"Specifically,":[100],"proposed":[102],"CANTINA+,":[103],"most":[105],"comprehensive":[106],"feature-based":[107],"approach":[108],"literature":[111],"including":[112],"eight":[113],"features,":[115],"which":[116,172],"exploits":[117],"HTML":[119],"Document":[120],"Object":[121],"Model":[122],"(DOM),":[123],"search":[124],"engines":[125],"third":[127],"party":[128],"services":[129],"techniques":[133],"detect":[135],"phish.":[136,164,233],"Moreover,":[137],"designed":[139],"two":[140,189],"filters":[141],"help":[143],"reduce":[144],"runtime":[148],"speedup.":[149],"The":[150,165],"first":[151],"near-duplicate":[154,223,252],"detector":[156],"uses":[158],"hashing":[159],"catch":[161],"highly":[162],"similar":[163],"second":[166],"login":[169,180],"form":[170,181],"filter,":[171],"directly":[173],"classifies":[174],"pages":[176],"no":[178],"identified":[179],"as":[182],"legitimate.":[183],"We":[184],"extensively":[185],"evaluated":[186],"CANTINA+":[187,209,238,278],"diverse":[193],"spectrum":[194],"corpora":[196],"8118":[198],"4883":[201],"legitimate":[202],"pages.":[204],"In":[205,234],"randomized":[207],"evaluation,":[208,237],"achieved":[210,240],"over":[211,219,241,248,274],"92%":[212,242,275],"TP":[213,221,243,250],"unique":[215,245],"testing":[216,224,246,253],"99%":[220,249],"about":[227,256],"0.4%":[228,271],"10%":[231],"training":[232,261],"time-based":[236],"also":[239],"1.4%":[257],"under":[259],"20%":[260],"two-week":[265],"sliding":[266],"window.":[267],"Capable":[268],"achieving":[270],"TP,":[276],"our":[277],"has":[279],"been":[280],"demonstrated":[281],"be":[283],"competitive":[285],"solution.":[287]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":32},{"year":2024,"cited_by_count":29},{"year":2023,"cited_by_count":39},{"year":2022,"cited_by_count":34},{"year":2021,"cited_by_count":43},{"year":2020,"cited_by_count":66},{"year":2019,"cited_by_count":43},{"year":2018,"cited_by_count":37},{"year":2017,"cited_by_count":33},{"year":2016,"cited_by_count":32},{"year":2015,"cited_by_count":20},{"year":2014,"cited_by_count":40},{"year":2013,"cited_by_count":16},{"year":2012,"cited_by_count":12}],"updated_date":"2026-04-13T07:58:08.660418","created_date":"2016-06-24T00:00:00"}