{"id":"https://openalex.org/W2144762303","doi":"https://doi.org/10.1145/2096149.2096154","title":"Extracting benefit from harm","display_name":"Extracting benefit from harm","publication_year":2012,"publication_date":"2012-01-16","ids":{"openalex":"https://openalex.org/W2144762303","doi":"https://doi.org/10.1145/2096149.2096154","mag":"2144762303"},"language":"en","primary_location":{"id":"doi:10.1145/2096149.2096154","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2096149.2096154","pdf_url":null,"source":{"id":"https://openalex.org/S66039016","display_name":"ACM SIGCOMM Computer Communication Review","issn_l":"0146-4833","issn":["0146-4833","1943-5819"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGCOMM Computer Communication Review","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040042401","display_name":"Alberto Dainotti","orcid":"https://orcid.org/0000-0001-6444-5656"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alberto Dainotti","raw_affiliation_strings":["University of Napoli Federico II, Napoli, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Napoli Federico II, Napoli, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035247182","display_name":"Roman Amman","orcid":null},"institutions":[{"id":"https://openalex.org/I39854758","display_name":"Auckland University of Technology","ror":"https://ror.org/01zvqw119","country_code":"NZ","type":"education","lineage":["https://openalex.org/I39854758"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Roman Amman","raw_affiliation_strings":["Auckland University of Technology, Auckland, New Zealand"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Auckland University of Technology, Auckland, New Zealand","institution_ids":["https://openalex.org/I39854758"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061491233","display_name":"Emile Aben","orcid":"https://orcid.org/0000-0002-8275-5460"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Emile Aben","raw_affiliation_strings":["RIPE NCC, Amsterdam, Netherlands","RIPE-NCC, Amsterdam, Netherlands#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RIPE NCC, Amsterdam, Netherlands","institution_ids":[]},{"raw_affiliation_string":"RIPE-NCC, Amsterdam, Netherlands#TAB#","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072282499","display_name":"kc claffy","orcid":"https://orcid.org/0000-0003-4824-3493"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kimberly C. Claffy","raw_affiliation_strings":["CAIDA/UCSD, San Diego, CA, USA","CAIDA/UCSD, San Diego, CA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CAIDA/UCSD, San Diego, CA, USA","institution_ids":["https://openalex.org/I36258959"]},{"raw_affiliation_string":"CAIDA/UCSD, San Diego, CA, USA#TAB#","institution_ids":["https://openalex.org/I36258959"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.172,"has_fulltext":false,"cited_by_count":36,"citation_normalized_percentile":{"value":0.96720291,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"42","issue":"1","first_page":"31","last_page":"39"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9836000204086304,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.7542620897293091},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6941735148429871},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.676534116268158},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6435117721557617},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6216388940811157},{"id":"https://openalex.org/keywords/internet-traffic","display_name":"Internet traffic","score":0.6120567321777344},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.5474753975868225},{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.501340389251709},{"id":"https://openalex.org/keywords/harm","display_name":"Harm","score":0.4638056755065918},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.42188534140586853},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2182045578956604},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.10939764976501465}],"concepts":[{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.7542620897293091},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6941735148429871},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.676534116268158},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6435117721557617},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6216388940811157},{"id":"https://openalex.org/C63969886","wikidata":"https://www.wikidata.org/wiki/Q3536440","display_name":"Internet traffic","level":3,"score":0.6120567321777344},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.5474753975868225},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.501340389251709},{"id":"https://openalex.org/C2777363581","wikidata":"https://www.wikidata.org/wiki/Q15098235","display_name":"Harm","level":2,"score":0.4638056755065918},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.42188534140586853},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2182045578956604},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.10939764976501465},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2096149.2096154","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2096149.2096154","pdf_url":null,"source":{"id":"https://openalex.org/S66039016","display_name":"ACM SIGCOMM Computer Communication Review","issn_l":"0146-4833","issn":["0146-4833","1943-5819"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGCOMM Computer Communication Review","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1664061557","https://openalex.org/W1985977780","https://openalex.org/W2000497232","https://openalex.org/W2031006315","https://openalex.org/W2081357650","https://openalex.org/W2108318379","https://openalex.org/W2123491545","https://openalex.org/W2130550456","https://openalex.org/W2139542924","https://openalex.org/W2144762488","https://openalex.org/W2158060559","https://openalex.org/W2162266953","https://openalex.org/W2167994609","https://openalex.org/W2296396094","https://openalex.org/W2399121719","https://openalex.org/W3000969317","https://openalex.org/W3138222079"],"related_works":["https://openalex.org/W2982616388","https://openalex.org/W2332974183","https://openalex.org/W1616547506","https://openalex.org/W3199575202","https://openalex.org/W2090868254","https://openalex.org/W3202075497","https://openalex.org/W2186252465","https://openalex.org/W4313484479","https://openalex.org/W4366249425","https://openalex.org/W3134700375"],"abstract_inverted_index":{"Unsolicited":[0],"one-way":[1],"Internet":[2,6,47,61],"traffic,":[3],"also":[4,41],"called":[5],"background":[7],"radiation":[8],"(IBR),":[9],"has":[10],"been":[11],"used":[12,43],"for":[13,31,132],"years":[14],"to":[15,33,44,52,93,143,153,177],"study":[16],"malicious":[17],"activity":[18,81],"on":[19,83,163,183],"the":[20,84,119,144,151,155],"Internet,":[21],"including":[22],"worms,":[23],"DoS":[24],"attacks,":[25],"and":[26,67,136,166],"scanning":[27],"address":[28],"space":[29],"looking":[30],"vulnerabilities":[32],"exploit.":[34],"We":[35,54,73],"show":[36],"how":[37],"such":[38,159],"traffic":[39,109,126],"can":[40],"be":[42],"analyze":[45],"macroscopic":[46],"events":[48,141,158,173],"that":[49,101,124,174],"are":[50,122],"unrelated":[51,142],"malware.":[53],"examine":[55],"two":[56],"phenomena:":[57],"country-level":[58],"censorship":[59],"of":[60,78,86,97,108,140,157,172],"communications":[62],"described":[63],"in":[64,167],"recent":[65,71],"work,":[66],"natural":[68,161],"disasters":[69,162],"(two":[70],"earthquakes).":[72],"introduce":[74],"a":[75,111,170],"new":[76],"metric":[77,99],"local":[79],"IBR":[80,125,145,149],"based":[82,182],"number":[85],"unique":[87],"IP":[88],"addresses":[89],"per":[90],"hour":[91],"contributing":[92],"IBR.":[94],"The":[95],"advantage":[96],"this":[98],"is":[100,103,127,175],"it":[102],"not":[104],"affected":[105],"by":[106],"bursts":[107],"from":[110],"few":[112],"hosts.":[113],"Although":[114],"we":[115,121],"have":[116],"only":[117],"scratched":[118],"surface,":[120],"convinced":[123],"an":[128],"important":[129],"building":[130],"block":[131],"comprehensive":[133],"monitoring,":[134],"analysis,":[135],"possibly":[137],"even":[138],"detection":[139],"itself.":[146],"In":[147],"particular,":[148],"offers":[150],"opportunity":[152],"monitor":[154],"impact":[156],"as":[160],"network":[164],"infrastructure,":[165],"particular":[168],"reveals":[169],"view":[171],"complementary":[176],"many":[178],"existing":[179],"measurement":[180],"platforms":[181],"(BGP)":[184],"control-plane":[185],"views":[186],"or":[187],"targeted":[188],"active":[189],"ICMP":[190],"probing.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":8},{"year":2012,"cited_by_count":4}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}