{"id":"https://openalex.org/W2161784403","doi":"https://doi.org/10.1145/2068816.2068854","title":"GQ","display_name":"GQ","publication_year":2011,"publication_date":"2011-11-02","ids":{"openalex":"https://openalex.org/W2161784403","doi":"https://doi.org/10.1145/2068816.2068854","mag":"2161784403"},"language":"en","primary_location":{"id":"doi:10.1145/2068816.2068854","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2068816.2068854","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2011 ACM SIGCOMM conference on Internet measurement conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024267292","display_name":"Christian Kreibich","orcid":null},"institutions":[{"id":"https://openalex.org/I1297971548","display_name":"International Computer Science Institute","ror":"https://ror.org/01ewh7m12","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1297971548"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Christian Kreibich","raw_affiliation_strings":["ICSI & UCB, Berkeley, CA, USA"],"affiliations":[{"raw_affiliation_string":"ICSI & UCB, Berkeley, CA, USA","institution_ids":["https://openalex.org/I1297971548"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026992212","display_name":"Nicholas Weaver","orcid":"https://orcid.org/0000-0001-7004-5819"},"institutions":[{"id":"https://openalex.org/I1297971548","display_name":"International Computer Science Institute","ror":"https://ror.org/01ewh7m12","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1297971548"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nicholas Weaver","raw_affiliation_strings":["ICSI & UCB, Berkeley, CA, USA"],"affiliations":[{"raw_affiliation_string":"ICSI & UCB, Berkeley, CA, USA","institution_ids":["https://openalex.org/I1297971548"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070578895","display_name":"Chris Kanich","orcid":"https://orcid.org/0000-0002-3836-2168"},"institutions":[{"id":"https://openalex.org/I2800935791","display_name":"UC San Diego Health System","ror":"https://ror.org/01kbfgm16","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I2800935791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chris Kanich","raw_affiliation_strings":["UC San Diego, San Diego, CA, USA"],"affiliations":[{"raw_affiliation_string":"UC San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I2800935791"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112117974","display_name":"Weidong Cui","orcid":"https://orcid.org/0000-0002-2871-9485"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Weidong Cui","raw_affiliation_strings":["Microsoft Research, Redmond, WA, USA"],"affiliations":[{"raw_affiliation_string":"Microsoft Research, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002219113","display_name":"Vern Paxson","orcid":"https://orcid.org/0009-0005-2673-543X"},"institutions":[{"id":"https://openalex.org/I1297971548","display_name":"International Computer Science Institute","ror":"https://ror.org/01ewh7m12","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1297971548"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vern Paxson","raw_affiliation_strings":["ICSI & UCB, Berkeley, CA, USA"],"affiliations":[{"raw_affiliation_string":"ICSI & UCB, Berkeley, CA, USA","institution_ids":["https://openalex.org/I1297971548"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5024267292"],"corresponding_institution_ids":["https://openalex.org/I1297971548"],"apc_list":null,"apc_paid":null,"fwci":9.8021,"has_fulltext":false,"cited_by_count":51,"citation_normalized_percentile":{"value":0.98399798,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"397","last_page":"412"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/containment","display_name":"Containment (computer programming)","score":0.8903511166572571},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8470683097839355},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.733702540397644},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.6721616983413696},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6296456456184387},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5173277854919434},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.4632014334201813},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.3591632843017578},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.1655721664428711},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1570517122745514}],"concepts":[{"id":"https://openalex.org/C2777019822","wikidata":"https://www.wikidata.org/wiki/Q390066","display_name":"Containment (computer programming)","level":2,"score":0.8903511166572571},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8470683097839355},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.733702540397644},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.6721616983413696},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6296456456184387},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5173277854919434},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.4632014334201813},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3591632843017578},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.1655721664428711},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1570517122745514},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2068816.2068854","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2068816.2068854","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2011 ACM SIGCOMM conference on Internet measurement conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320333591","display_name":"Multidisciplinary University Research Initiative","ror":null},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"},{"id":"https://openalex.org/F4320338292","display_name":"Lawrence Berkeley National Laboratory","ror":"https://ror.org/02jbv0t02"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W91931328","https://openalex.org/W164610907","https://openalex.org/W198543417","https://openalex.org/W1481472066","https://openalex.org/W1503224444","https://openalex.org/W1516506771","https://openalex.org/W1593743365","https://openalex.org/W1650881334","https://openalex.org/W1836378862","https://openalex.org/W1968061803","https://openalex.org/W1982070413","https://openalex.org/W1987535082","https://openalex.org/W2010365467","https://openalex.org/W2091692346","https://openalex.org/W2100673955","https://openalex.org/W2111038628","https://openalex.org/W2111165162","https://openalex.org/W2115175195","https://openalex.org/W2147118406","https://openalex.org/W2156453323","https://openalex.org/W2168996020","https://openalex.org/W2294919332","https://openalex.org/W2406563751","https://openalex.org/W2914982603","https://openalex.org/W3021187106","https://openalex.org/W4301489482","https://openalex.org/W6629915129","https://openalex.org/W6713671097"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W3187581118","https://openalex.org/W3143747655","https://openalex.org/W2901835651","https://openalex.org/W2883616266","https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W1599449514"],"abstract_inverted_index":{"Measurement":[0],"and":[1,32,103,109,117,126],"analysis":[2],"of":[3,14,38,124,128],"modern":[4],"malware":[5,47,86],"systems":[6,26],"such":[7],"as":[8],"botnets":[9],"relies":[10],"crucially":[11],"on":[12],"execution":[13,87],"specimens":[15],"in":[16,42,63],"a":[17,85],"setting":[18],"that":[19,54,89],"enables":[20],"them":[21],"to":[22,44,94,97],"communicate":[23],"with":[24],"other":[25],"across":[27],"the":[28,46,129],"Internet.":[29],"Ethical,":[30],"legal,":[31],"technical":[33],"constraints":[34],"however":[35],"demand":[36],"containment":[37,73,92,99,115],"resulting":[39],"network":[40],"activity":[41],"order":[43],"prevent":[45],"from":[48,121],"harming":[49],"others":[50],"while":[51],"still":[52],"ensuring":[53],"it":[55,77],"exhibits":[56],"its":[57],"inherent":[58],"behavior.":[59],"Current":[60],"best":[61],"practices":[62],"this":[64,80],"space":[65],"are":[66],"sorely":[67],"lacking:":[68],"measurement":[69],"researchers":[70],"often":[71],"treat":[72],"superficially,":[74],"sometimes":[75],"ignoring":[76],"altogether.":[78],"In":[79],"paper":[81],"we":[82],"present":[83],"GQ,":[84],"\"farm\"":[88],"uses":[90],"explicit":[91],"primitives":[93],"enable":[95],"analysts":[96],"develop":[98],"policies":[100],"naturally,":[101],"iteratively,":[102],"safely.":[104],"We":[105],"discuss":[106],"GQ's":[107],"architecture":[108],"implementation,":[110],"our":[111,118],"methodology":[112],"for":[113],"developing":[114],"policies,":[116],"experiences":[119],"gathered":[120],"six":[122],"years":[123],"development":[125],"operation":[127],"system.":[130]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":5},{"year":2016,"cited_by_count":4},{"year":2015,"cited_by_count":5},{"year":2014,"cited_by_count":8},{"year":2013,"cited_by_count":10},{"year":2012,"cited_by_count":8}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2016-06-24T00:00:00"}