{"id":"https://openalex.org/W2095720311","doi":"https://doi.org/10.1145/2590296.2590302","title":"The harvester, the botmaster, and the spammer","display_name":"The harvester, the botmaster, and the spammer","publication_year":2014,"publication_date":"2014-05-30","ids":{"openalex":"https://openalex.org/W2095720311","doi":"https://doi.org/10.1145/2590296.2590302","mag":"2095720311"},"language":"en","primary_location":{"id":"doi:10.1145/2590296.2590302","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2590296.2590302","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 9th ACM symposium on Information, computer and communications security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046881273","display_name":"Gianluca Stringhini","orcid":"https://orcid.org/0000-0002-6162-578X"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Gianluca Stringhini","raw_affiliation_strings":["UC Santa Barbara, Santa Barbara, CA, USA"],"affiliations":[{"raw_affiliation_string":"UC Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003825969","display_name":"Oliver Hohlfeld","orcid":"https://orcid.org/0000-0002-7557-1081"},"institutions":[{"id":"https://openalex.org/I887968799","display_name":"RWTH Aachen University","ror":"https://ror.org/04xfq0f34","country_code":"DE","type":"education","lineage":["https://openalex.org/I887968799"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Oliver Hohlfeld","raw_affiliation_strings":["RWTH Aachen University, Aachen, Germany","RWTH-Aachen University, Aachen, Germany"],"affiliations":[{"raw_affiliation_string":"RWTH Aachen University, Aachen, Germany","institution_ids":["https://openalex.org/I887968799"]},{"raw_affiliation_string":"RWTH-Aachen University, Aachen, Germany","institution_ids":["https://openalex.org/I887968799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022177364","display_name":"Christopher Kruegel","orcid":"https://orcid.org/0000-0001-5140-3414"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Kruegel","raw_affiliation_strings":["UC Santa Barbara, Santa Barbara, CA, USA"],"affiliations":[{"raw_affiliation_string":"UC Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075685499","display_name":"Giovanni Vigna","orcid":"https://orcid.org/0000-0002-3422-5369"},"institutions":[{"id":"https://openalex.org/I154570441","display_name":"University of California, Santa Barbara","ror":"https://ror.org/02t274463","country_code":"US","type":"education","lineage":["https://openalex.org/I154570441"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Giovanni Vigna","raw_affiliation_strings":["UC Santa Barbara, Santa Barbara, CA, USA"],"affiliations":[{"raw_affiliation_string":"UC Santa Barbara, Santa Barbara, CA, USA","institution_ids":["https://openalex.org/I154570441"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5046881273"],"corresponding_institution_ids":["https://openalex.org/I154570441"],"apc_list":null,"apc_paid":null,"fwci":12.6224,"has_fulltext":false,"cited_by_count":31,"citation_normalized_percentile":{"value":0.98359037,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"353","last_page":"364"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/spamming","display_name":"Spamming","score":0.9828412532806396},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9265089631080627},{"id":"https://openalex.org/keywords/forum-spam","display_name":"Forum spam","score":0.9027981758117676},{"id":"https://openalex.org/keywords/spambot","display_name":"Spambot","score":0.9018460512161255},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6438993811607361},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.640365719795227},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5202966332435608},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47903361916542053},{"id":"https://openalex.org/keywords/dissemination","display_name":"Dissemination","score":0.43060630559921265},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4046664535999298}],"concepts":[{"id":"https://openalex.org/C158955206","wikidata":"https://www.wikidata.org/wiki/Q83058","display_name":"Spamming","level":3,"score":0.9828412532806396},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9265089631080627},{"id":"https://openalex.org/C157310412","wikidata":"https://www.wikidata.org/wiki/Q3140915","display_name":"Forum spam","level":5,"score":0.9027981758117676},{"id":"https://openalex.org/C127735637","wikidata":"https://www.wikidata.org/wiki/Q2306702","display_name":"Spambot","level":4,"score":0.9018460512161255},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6438993811607361},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.640365719795227},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5202966332435608},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47903361916542053},{"id":"https://openalex.org/C101780184","wikidata":"https://www.wikidata.org/wiki/Q840576","display_name":"Dissemination","level":2,"score":0.43060630559921265},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4046664535999298},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2590296.2590302","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2590296.2590302","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 9th ACM symposium on Information, computer and communications security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1773651856","display_name":null,"funder_award_id":"W911NF0910553","funder_id":"https://openalex.org/F4320338281","funder_display_name":"Army Research Office"},{"id":"https://openalex.org/G7146038114","display_name":null,"funder_award_id":"N000140911042","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320334771","display_name":"Science and Engineering Research Board","ror":"https://ror.org/03ffdsr55"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W9904157","https://openalex.org/W63790640","https://openalex.org/W86173103","https://openalex.org/W113187444","https://openalex.org/W348779886","https://openalex.org/W1530266714","https://openalex.org/W1561608006","https://openalex.org/W1593743365","https://openalex.org/W1650881334","https://openalex.org/W1775772884","https://openalex.org/W1916198581","https://openalex.org/W2030018935","https://openalex.org/W2069978326","https://openalex.org/W2091692346","https://openalex.org/W2112063328","https://openalex.org/W2121252355","https://openalex.org/W2134385885","https://openalex.org/W2150795982","https://openalex.org/W2156453323","https://openalex.org/W2294919332","https://openalex.org/W2350778671","https://openalex.org/W2406563751"],"related_works":["https://openalex.org/W2018000323","https://openalex.org/W2403960249","https://openalex.org/W2898345088","https://openalex.org/W2080521416","https://openalex.org/W1937320931","https://openalex.org/W2075252441","https://openalex.org/W1502194589","https://openalex.org/W1965586806","https://openalex.org/W4293384513","https://openalex.org/W1481472066"],"abstract_inverted_index":{"A":[0],"spammer":[1],"needs":[2],"three":[3,29,78,157],"elements":[4,30,79,87],"to":[5,17,23,59,122,137,162,216],"run":[6,123],"a":[7,10,21,40,51,67,140],"spam":[8,38,92,112,124,207],"operation:":[9,39],"list":[11,43],"of":[12,27,36,47,85,193],"victim":[13,105],"email":[14,42,49,53,101,120,130,176],"addresses,":[15,50,187],"content":[16,54,192],"be":[18,45,56,212],"sent,":[19],"and":[20,62,66,99,107,114,118,132,172,188],"botnet":[22,69],"send":[24],"it.":[25],"Each":[26],"these":[28,77,86,156,186,194],"are":[31],"critical":[32,76],"for":[33,111],"the":[34,37,60,91,97,153,167,179,182,191,199,202,206],"success":[35],"good":[41,52,68],"should":[44,55,70],"composed":[46],"valid":[48],"both":[57],"convincing":[58],"reader":[61],"evades":[63],"anti-spam":[64,220],"filters,":[65],"efficiently":[71],"sent":[72],"spam.":[73],"Given":[74],"how":[75],"are,":[80],"figures":[81],"specialized":[82],"on":[83,151,166,178],"one":[84],"have":[88],"emerged":[89],"in":[90,139,205],"ecosystem.":[93,208],"Email":[94],"harvesters":[95,131],"crawl":[96],"web":[98],"compile":[100],"lists,":[102],"botmasters":[103,133],"infect":[104],"computers":[106],"maintain":[108],"efficient":[109],"botnets":[110,117,183],"dissemination,":[113],"spammers":[115,138],"rent":[116],"buy":[119],"lists":[121],"campaigns.":[125],"Previous":[126],"research":[127,146],"suggested":[128],"that":[129,184],"sell":[134],"their":[135],"services":[136],"prosperous":[141],"underground":[142],"economy.":[143],"No":[144],"rigorous":[145],"has":[147],"been":[148],"performed,":[149],"however,":[150],"understanding":[152],"relations":[154,168,200],"between":[155,169,201],"actors.":[158],"This":[159],"paper":[160],"aims":[161],"shed":[163],"some":[164],"light":[165],"harvesters,":[170],"botmasters,":[171],"spammers.":[173],"By":[174],"disseminating":[175],"addresses":[177],"Internet,":[180],"fingerprinting":[181],"contact":[185],"looking":[189],"at":[190],"emails,":[195],"we":[196],"can":[197,211],"infer":[198],"actors":[203],"involved":[204],"Our":[209],"observations":[210],"used":[213],"by":[214],"researchers":[215],"develop":[217],"more":[218],"effective":[219],"systems.":[221]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":5},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":5},{"year":2014,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}