{"id":"https://openalex.org/W1990089904","doi":"https://doi.org/10.1145/2523649.2523670","title":"Beehive","display_name":"Beehive","publication_year":2013,"publication_date":"2013-12-09","ids":{"openalex":"https://openalex.org/W1990089904","doi":"https://doi.org/10.1145/2523649.2523670","mag":"1990089904"},"language":"en","primary_location":{"id":"doi:10.1145/2523649.2523670","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2523649.2523670","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015173179","display_name":"Ting-Fang Yen","orcid":null},"institutions":[{"id":"https://openalex.org/I4210094779","display_name":"RF Laboratories (United States)","ror":"https://ror.org/00tjt8p18","country_code":"US","type":"company","lineage":["https://openalex.org/I4210094779"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Ting-Fang Yen","raw_affiliation_strings":["RSA Laboratories, Cambridge, MA"],"affiliations":[{"raw_affiliation_string":"RSA Laboratories, Cambridge, MA","institution_ids":["https://openalex.org/I4210094779"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035574749","display_name":"Alina Oprea","orcid":"https://orcid.org/0000-0002-4979-5292"},"institutions":[{"id":"https://openalex.org/I4210094779","display_name":"RF Laboratories (United States)","ror":"https://ror.org/00tjt8p18","country_code":"US","type":"company","lineage":["https://openalex.org/I4210094779"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alina Oprea","raw_affiliation_strings":["RSA Laboratories, Cambridge, MA"],"affiliations":[{"raw_affiliation_string":"RSA Laboratories, Cambridge, MA","institution_ids":["https://openalex.org/I4210094779"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067976804","display_name":"Kaan Onarl\u0131o\u011flu","orcid":"https://orcid.org/0009-0003-7832-5884"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kaan Onarlioglu","raw_affiliation_strings":["Northeastern University, Boston, MA","Northeastern University, Boston (MA)#TAB#"],"affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, MA","institution_ids":["https://openalex.org/I12912129"]},{"raw_affiliation_string":"Northeastern University, Boston (MA)#TAB#","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071395405","display_name":"Todd Leetham","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Todd Leetham","raw_affiliation_strings":["EMC Corp, Hopkinton, MA","EMC Corp. (Hopkinton, MA)"],"affiliations":[{"raw_affiliation_string":"EMC Corp, Hopkinton, MA","institution_ids":[]},{"raw_affiliation_string":"EMC Corp. (Hopkinton, MA)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085358980","display_name":"William Robertson","orcid":"https://orcid.org/0000-0002-6968-0273"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William Robertson","raw_affiliation_strings":["Northeastern University, Boston, MA","Northeastern University, Boston (MA)#TAB#"],"affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, MA","institution_ids":["https://openalex.org/I12912129"]},{"raw_affiliation_string":"Northeastern University, Boston (MA)#TAB#","institution_ids":["https://openalex.org/I12912129"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029249775","display_name":"Ari Juels","orcid":"https://orcid.org/0009-0002-1143-5504"},"institutions":[{"id":"https://openalex.org/I4210094779","display_name":"RF Laboratories (United States)","ror":"https://ror.org/00tjt8p18","country_code":"US","type":"company","lineage":["https://openalex.org/I4210094779"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ari Juels","raw_affiliation_strings":["RSA Laboratories, Cambridge, MA"],"affiliations":[{"raw_affiliation_string":"RSA Laboratories, Cambridge, MA","institution_ids":["https://openalex.org/I4210094779"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077875821","display_name":"Engin Kirda","orcid":"https://orcid.org/0000-0001-9988-6873"},"institutions":[{"id":"https://openalex.org/I12912129","display_name":"Northeastern University","ror":"https://ror.org/04t5xt781","country_code":"US","type":"education","lineage":["https://openalex.org/I12912129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Engin Kirda","raw_affiliation_strings":["Northeastern University, Boston, MA","Northeastern University, Boston (MA)#TAB#"],"affiliations":[{"raw_affiliation_string":"Northeastern University, Boston, MA","institution_ids":["https://openalex.org/I12912129"]},{"raw_affiliation_string":"Northeastern University, Boston (MA)#TAB#","institution_ids":["https://openalex.org/I12912129"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5015173179"],"corresponding_institution_ids":["https://openalex.org/I4210094779"],"apc_list":null,"apc_paid":null,"fwci":19.6459,"has_fulltext":false,"cited_by_count":266,"citation_normalized_percentile":{"value":0.99428586,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"199","last_page":"208"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/suspect","display_name":"Suspect","score":0.7245843410491943},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6760900616645813},{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.6551179885864258},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6550655961036682},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5604695081710815},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.4670174717903137},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4186713695526123},{"id":"https://openalex.org/keywords/situation-awareness","display_name":"Situation awareness","score":0.4155324101448059},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.41021671891212463},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.33870548009872437},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12671160697937012}],"concepts":[{"id":"https://openalex.org/C2778223634","wikidata":"https://www.wikidata.org/wiki/Q224952","display_name":"Suspect","level":2,"score":0.7245843410491943},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6760900616645813},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.6551179885864258},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6550655961036682},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5604695081710815},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.4670174717903137},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4186713695526123},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.4155324101448059},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.41021671891212463},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.33870548009872437},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12671160697937012},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2523649.2523670","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2523649.2523670","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 29th Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7599999904632568,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G2668717367","display_name":null,"funder_award_id":"CNS-1116777","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"}],"funders":[{"id":"https://openalex.org/F4320337388","display_name":"Division of Computer and Network Systems","ror":"https://ror.org/02rdzmk74"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W80155331","https://openalex.org/W155384935","https://openalex.org/W191098608","https://openalex.org/W196740607","https://openalex.org/W1462349742","https://openalex.org/W1481472066","https://openalex.org/W1493454437","https://openalex.org/W1499648394","https://openalex.org/W1551705282","https://openalex.org/W1561983441","https://openalex.org/W1583098994","https://openalex.org/W1630225947","https://openalex.org/W1775772884","https://openalex.org/W1954903228","https://openalex.org/W1988741337","https://openalex.org/W2043178675","https://openalex.org/W2061455058","https://openalex.org/W2061525263","https://openalex.org/W2065202763","https://openalex.org/W2082550445","https://openalex.org/W2100307718","https://openalex.org/W2101737524","https://openalex.org/W2102671922","https://openalex.org/W2104209065","https://openalex.org/W2110675786","https://openalex.org/W2113061123","https://openalex.org/W2113344319","https://openalex.org/W2114996745","https://openalex.org/W2127084909","https://openalex.org/W2136495567","https://openalex.org/W2146729596","https://openalex.org/W2148694408","https://openalex.org/W2149235666","https://openalex.org/W2149701633","https://openalex.org/W2153056025","https://openalex.org/W2159636195","https://openalex.org/W2162709050","https://openalex.org/W2168248885","https://openalex.org/W2401054255","https://openalex.org/W2970838456","https://openalex.org/W2999729612","https://openalex.org/W4233802931","https://openalex.org/W4292023222","https://openalex.org/W4313784310","https://openalex.org/W6606342502","https://openalex.org/W6628600657","https://openalex.org/W6628628164"],"related_works":["https://openalex.org/W2361650029","https://openalex.org/W2158220440","https://openalex.org/W1852121458","https://openalex.org/W2352199719","https://openalex.org/W2360075860","https://openalex.org/W2391477130","https://openalex.org/W2353452694","https://openalex.org/W2369414226","https://openalex.org/W2378762974","https://openalex.org/W2258115363"],"abstract_inverted_index":{"As":[0],"more":[1,3],"and":[2,34,42,73,77,86,93],"Internet-based":[4],"attacks":[5],"arise,":[6],"organizations":[7],"are":[8,43,74,88],"responding":[9],"by":[10],"deploying":[11],"an":[12,58],"assortment":[13],"of":[14,24,32,71],"security":[15,51,64],"products":[16,65],"that":[17,49,57,87],"generate":[18,80],"situational":[19],"intelligence":[20],"in":[21,39,96],"the":[22,40,45],"form":[23],"logs.":[25],"These":[26],"logs":[27,81],"often":[28,66,89,107],"contain":[29],"high":[30],"volumes":[31],"interesting":[33],"useful":[35],"information":[36,50,102],"about":[37],"activities":[38],"network,":[41],"among":[44],"first":[46],"data":[47],"sources":[48],"specialists":[52],"consult":[53],"when":[54],"they":[55],"suspect":[56],"attack":[59],"has":[60],"taken":[61],"place.":[62],"However,":[63],"come":[67],"from":[68],"a":[69],"patchwork":[70],"vendors,":[72],"inconsistently":[75],"installed":[76],"administered.":[78],"They":[79],"whose":[82],"formats":[83],"differ":[84],"widely":[85],"incomplete,":[90],"mutually":[91],"contradictory,":[92],"very":[94],"large":[95],"volume.":[97],"Hence,":[98],"although":[99],"this":[100],"collected":[101],"is":[103,106],"useful,":[104],"it":[105],"dirty.":[108]},"counts_by_year":[{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":18},{"year":2023,"cited_by_count":18},{"year":2022,"cited_by_count":21},{"year":2021,"cited_by_count":30},{"year":2020,"cited_by_count":25},{"year":2019,"cited_by_count":40},{"year":2018,"cited_by_count":30},{"year":2017,"cited_by_count":22},{"year":2016,"cited_by_count":23},{"year":2015,"cited_by_count":20},{"year":2014,"cited_by_count":8},{"year":2013,"cited_by_count":1}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2016-06-24T00:00:00"}