{"id":"https://openalex.org/W2164391797","doi":"https://doi.org/10.1145/2413296.2413302","title":"Beyond the blacklist","display_name":"Beyond the blacklist","publication_year":2012,"publication_date":"2012-09-18","ids":{"openalex":"https://openalex.org/W2164391797","doi":"https://doi.org/10.1145/2413296.2413302","mag":"2164391797"},"language":"en","primary_location":{"id":"doi:10.1145/2413296.2413302","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2413296.2413302","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2012 New Security Paradigms Workshop","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102919117","display_name":"Ben Edwards","orcid":"https://orcid.org/0000-0001-6041-5054"},"institutions":[{"id":"https://openalex.org/I169521973","display_name":"University of New Mexico","ror":"https://ror.org/05fs6jp91","country_code":"US","type":"education","lineage":["https://openalex.org/I169521973"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Benjamin Edwards","raw_affiliation_strings":["University of New Mexico, Albuquerque, NM, USA"],"affiliations":[{"raw_affiliation_string":"University of New Mexico, Albuquerque, NM, USA","institution_ids":["https://openalex.org/I169521973"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073243028","display_name":"Tyler Moore","orcid":"https://orcid.org/0000-0002-8771-8191"},"institutions":[{"id":"https://openalex.org/I178169726","display_name":"Southern Methodist University","ror":"https://ror.org/042tdr378","country_code":"US","type":"education","lineage":["https://openalex.org/I178169726"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tyler Moore","raw_affiliation_strings":["Southern Methodist University, Dallas, TX, USA"],"affiliations":[{"raw_affiliation_string":"Southern Methodist University, Dallas, TX, USA","institution_ids":["https://openalex.org/I178169726"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089115054","display_name":"George Stelle","orcid":"https://orcid.org/0000-0003-3644-2591"},"institutions":[{"id":"https://openalex.org/I169521973","display_name":"University of New Mexico","ror":"https://ror.org/05fs6jp91","country_code":"US","type":"education","lineage":["https://openalex.org/I169521973"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"George Stelle","raw_affiliation_strings":["University of New Mexico, Albuquerque, NM, USA"],"affiliations":[{"raw_affiliation_string":"University of New Mexico, Albuquerque, NM, USA","institution_ids":["https://openalex.org/I169521973"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016671058","display_name":"Steven Hofmeyr","orcid":"https://orcid.org/0000-0002-3299-472X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Steven Hofmeyr","raw_affiliation_strings":["Lawrence Berkley National Laboratory, Berkley, CA, USA"],"affiliations":[{"raw_affiliation_string":"Lawrence Berkley National Laboratory, Berkley, CA, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5114376382","display_name":"Stephanie Forrest","orcid":"https://orcid.org/0000-0002-5904-1646"},"institutions":[{"id":"https://openalex.org/I169521973","display_name":"University of New Mexico","ror":"https://ror.org/05fs6jp91","country_code":"US","type":"education","lineage":["https://openalex.org/I169521973"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stephanie Forrest","raw_affiliation_strings":["University of New Mexico, Albuquerque, NM, USA"],"affiliations":[{"raw_affiliation_string":"University of New Mexico, Albuquerque, NM, USA","institution_ids":["https://openalex.org/I169521973"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5102919117"],"corresponding_institution_ids":["https://openalex.org/I169521973"],"apc_list":null,"apc_paid":null,"fwci":3.5527,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.93756181,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"53","last_page":"66"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9871000051498413,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/blacklist","display_name":"Blacklist","score":0.9585858583450317},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4727386236190796},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.16829556226730347}],"concepts":[{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.9585858583450317},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4727386236190796},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.16829556226730347}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2413296.2413302","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2413296.2413302","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2012 New Security Paradigms Workshop","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W48212787","https://openalex.org/W58852127","https://openalex.org/W91862604","https://openalex.org/W285266469","https://openalex.org/W1482886841","https://openalex.org/W1491237615","https://openalex.org/W1550000763","https://openalex.org/W1566161340","https://openalex.org/W1593407590","https://openalex.org/W1843351773","https://openalex.org/W1970867218","https://openalex.org/W1980065740","https://openalex.org/W1984936212","https://openalex.org/W1994687138","https://openalex.org/W1995554356","https://openalex.org/W2000042664","https://openalex.org/W2051498836","https://openalex.org/W2063745522","https://openalex.org/W2095610745","https://openalex.org/W2099889974","https://openalex.org/W2111165162","https://openalex.org/W2113167642","https://openalex.org/W2121252355","https://openalex.org/W2125109784","https://openalex.org/W2129889116","https://openalex.org/W2136680211","https://openalex.org/W2144620372","https://openalex.org/W2145994642","https://openalex.org/W2150857214","https://openalex.org/W2159919478","https://openalex.org/W2296151511","https://openalex.org/W2343613125","https://openalex.org/W2503619932","https://openalex.org/W2914982603","https://openalex.org/W3103362336","https://openalex.org/W6629077207","https://openalex.org/W6674628898","https://openalex.org/W6676915735","https://openalex.org/W6678648185","https://openalex.org/W6697154064"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W3172840274","https://openalex.org/W2245533262","https://openalex.org/W1997004150","https://openalex.org/W50122730","https://openalex.org/W3129811130","https://openalex.org/W3185731761","https://openalex.org/W2265547225","https://openalex.org/W2181543702"],"abstract_inverted_index":{"Malware":[0],"spread":[1,46],"among":[2],"websites":[3,6,23,51,141],"and":[4,7,24,52,78,105,112,206],"between":[5,109],"clients":[8],"is":[9,90,125],"an":[10,16,221],"increasing":[11],"problem.":[12],"Search":[13],"engines":[14],"play":[15,225],"important":[17,222],"role":[18,223],"in":[19,85,177,217,226],"directing":[20],"users":[21],"to":[22,116,121,144,162,181,197,224],"are":[25,137,142,204],"a":[26,40,64,79,87,93,122],"natural":[27],"control":[28],"point":[29],"for":[30,128],"intervening":[31],"using":[32],"mechanisms":[33],"such":[34,212],"as":[35,175,213],"blacklisting.":[36],"The":[37],"paper":[38,219],"presents":[39],"simple":[41],"Markov":[42],"model":[43],"of":[44,50,56,81,172,185],"malware":[45],"through":[47],"large":[48],"populations":[49],"studies":[53],"the":[54,99,107,214],"effect":[55],"two":[57],"interventions":[58,136,203],"that":[59,124,135,151,169,192,209],"might":[60],"be":[61,195],"deployed":[62],"by":[63,71,92],"search":[65,75],"provider:":[66],"blacklisting":[67],"infected":[68],"web":[69,228],"pages":[70],"removing":[72],"them":[73],"from":[74],"results":[76],"entirely":[77],"generalization":[80],"blacklisting,":[82],"called":[83],"depreferencing,":[84],"which":[86],"website's":[88],"ranking":[89],"decreased":[91],"fixed":[94],"percentage":[95],"each":[96],"time":[97],"period":[98],"site":[100],"remains":[101],"infected.":[102],"We":[103],"analyze":[104],"study":[106],"trade-offs":[108],"infection":[110,153],"exposure":[111],"traffic":[113,159],"loss":[114,160],"due":[115,161],"false":[117,163],"positives":[118],"(the":[119],"cost":[120],"website":[123,173,202],"incorrectly":[126],"blacklisted)":[127],"different":[129],"interventions.":[130],"As":[131],"expected,":[132],"we":[133,148],"find":[134,150],"most":[138],"effective":[139],"when":[140],"slow":[143],"remove":[145],"infections.":[146],"Surprisingly,":[147],"also":[149,167],"low":[152],"or":[154],"recovery":[155],"rates":[156],"can":[157],"increase":[158],"positives.":[164],"Our":[165],"analysis":[166],"shows":[168],"heavy-tailed":[170],"distributions":[171],"popularity,":[174],"documented":[176],"many":[178],"studies,":[179],"leads":[180],"high":[182],"sample":[183],"variance":[184],"all":[186],"measured":[187],"outcomes.":[188],"This":[189],"result":[190],"implies":[191],"it":[193,207],"will":[194],"difficult":[196],"determine":[198],"empirically":[199],"whether":[200],"certain":[201],"effective,":[205],"suggests":[208],"theoretical":[210],"models":[211],"one":[215],"described":[216],"this":[218],"have":[220],"improving":[227],"security.":[229]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}