{"id":"https://openalex.org/W2516063120","doi":"https://doi.org/10.1145/3011883.3011885","title":"Harvesting the low-hanging fruits","display_name":"Harvesting the low-hanging fruits","publication_year":2016,"publication_date":"2016-09-26","ids":{"openalex":"https://openalex.org/W2516063120","doi":"https://doi.org/10.1145/3011883.3011885","mag":"2516063120"},"language":"en","primary_location":{"id":"doi:10.1145/3011883.3011885","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3011883.3011885","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 New Security Paradigms Workshop","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011613970","display_name":"Hassan H. Halawa","orcid":null},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Hassan Halawa","raw_affiliation_strings":["University of British Columbia, Vancouver, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035380853","display_name":"Konstantin Beznosov","orcid":"https://orcid.org/0000-0002-1327-7477"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Konstantin Beznosov","raw_affiliation_strings":["University of British Columbia, Vancouver, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010986977","display_name":"Yazan Boshmaf","orcid":"https://orcid.org/0000-0002-0816-6924"},"institutions":[{"id":"https://openalex.org/I1301390666","display_name":"Qatar Airways (Qatar)","ror":"https://ror.org/01hx00y13","country_code":"QA","type":"company","lineage":["https://openalex.org/I1301390666"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Yazan Boshmaf","raw_affiliation_strings":["Qatar Computing Research Institute, Doha, Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Qatar Computing Research Institute, Doha, Qatar","institution_ids":["https://openalex.org/I1301390666"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053106292","display_name":"Bar\u0131\u015f Co\u015fkun","orcid":"https://orcid.org/0000-0001-6179-1481"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Baris Coskun","raw_affiliation_strings":["Yahoo! Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yahoo! Research","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088755273","display_name":"Matei Ripeanu","orcid":"https://orcid.org/0000-0001-9839-3866"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Matei Ripeanu","raw_affiliation_strings":["University of British Columbia, Vancouver, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023875877","display_name":"Elizeu Santos\u2010Neto","orcid":null},"institutions":[{"id":"https://openalex.org/I4210100430","display_name":"Google (Switzerland)","ror":"https://ror.org/014f9c269","country_code":"CH","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210100430","https://openalex.org/I4210128969"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Elizeu Santos-Neto","raw_affiliation_strings":["Google, Inc., Z\u00fcrich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Google, Inc., Z\u00fcrich, Switzerland","institution_ids":["https://openalex.org/I4210100430"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3103,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.81126562,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"11","last_page":"22"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8642194867134094},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.7606106996536255},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7346305251121521},{"id":"https://openalex.org/keywords/population","display_name":"Population","score":0.7192835211753845},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6631544232368469},{"id":"https://openalex.org/keywords/status-quo","display_name":"Status quo","score":0.6555604338645935},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.6188222765922546},{"id":"https://openalex.org/keywords/social-engineering","display_name":"Social engineering (security)","score":0.5682471394538879},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.28995412588119507},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.2578718066215515},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.07006368041038513}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8642194867134094},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.7606106996536255},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7346305251121521},{"id":"https://openalex.org/C2908647359","wikidata":"https://www.wikidata.org/wiki/Q2625603","display_name":"Population","level":2,"score":0.7192835211753845},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6631544232368469},{"id":"https://openalex.org/C2776748549","wikidata":"https://www.wikidata.org/wiki/Q201610","display_name":"Status quo","level":2,"score":0.6555604338645935},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.6188222765922546},{"id":"https://openalex.org/C70118762","wikidata":"https://www.wikidata.org/wiki/Q376934","display_name":"Social engineering (security)","level":2,"score":0.5682471394538879},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.28995412588119507},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2578718066215515},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.07006368041038513},{"id":"https://openalex.org/C149923435","wikidata":"https://www.wikidata.org/wiki/Q37732","display_name":"Demography","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3011883.3011885","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3011883.3011885","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2016 New Security Paradigms Workshop","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.4099999964237213}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":88,"referenced_works":["https://openalex.org/W40177048","https://openalex.org/W76311454","https://openalex.org/W134335166","https://openalex.org/W139675679","https://openalex.org/W1269365933","https://openalex.org/W1415990210","https://openalex.org/W1420268584","https://openalex.org/W1482228399","https://openalex.org/W1530215515","https://openalex.org/W1553004598","https://openalex.org/W1815362064","https://openalex.org/W1827212170","https://openalex.org/W1916595307","https://openalex.org/W1922737625","https://openalex.org/W1970801611","https://openalex.org/W1973085407","https://openalex.org/W1974314988","https://openalex.org/W1975909792","https://openalex.org/W1986678144","https://openalex.org/W1989643196","https://openalex.org/W1989957782","https://openalex.org/W1990188874","https://openalex.org/W1991839217","https://openalex.org/W1992685726","https://openalex.org/W2009597554","https://openalex.org/W2012481173","https://openalex.org/W2025635041","https://openalex.org/W2026285994","https://openalex.org/W2029749307","https://openalex.org/W2030553727","https://openalex.org/W2033694966","https://openalex.org/W2034279876","https://openalex.org/W2037202491","https://openalex.org/W2045591401","https://openalex.org/W2051498836","https://openalex.org/W2052378529","https://openalex.org/W2061276405","https://openalex.org/W2063539698","https://openalex.org/W2071869991","https://openalex.org/W2073172537","https://openalex.org/W2098395374","https://openalex.org/W2099170260","https://openalex.org/W2099890503","https://openalex.org/W2100974526","https://openalex.org/W2103378897","https://openalex.org/W2105177883","https://openalex.org/W2111165162","https://openalex.org/W2112753415","https://openalex.org/W2113344319","https://openalex.org/W2119545418","https://openalex.org/W2120111750","https://openalex.org/W2121216923","https://openalex.org/W2125908420","https://openalex.org/W2134750673","https://openalex.org/W2136136174","https://openalex.org/W2139565456","https://openalex.org/W2141985040","https://openalex.org/W2142595254","https://openalex.org/W2143534599","https://openalex.org/W2146657063","https://openalex.org/W2146729596","https://openalex.org/W2152760593","https://openalex.org/W2155750598","https://openalex.org/W2156836300","https://openalex.org/W2157597875","https://openalex.org/W2157826538","https://openalex.org/W2158909123","https://openalex.org/W2162101611","https://openalex.org/W2162532690","https://openalex.org/W2163762767","https://openalex.org/W2168508162","https://openalex.org/W2211083916","https://openalex.org/W2228853307","https://openalex.org/W2239182470","https://openalex.org/W2252431151","https://openalex.org/W2257997238","https://openalex.org/W2290561533","https://openalex.org/W2296452361","https://openalex.org/W2335888457","https://openalex.org/W2396652156","https://openalex.org/W2397135192","https://openalex.org/W2405607598","https://openalex.org/W2528727354","https://openalex.org/W2968948429","https://openalex.org/W4232895233","https://openalex.org/W4250823744","https://openalex.org/W6631718227","https://openalex.org/W6766917394"],"related_works":["https://openalex.org/W2944809083","https://openalex.org/W3159552247","https://openalex.org/W4229025036","https://openalex.org/W2737752763","https://openalex.org/W2765340726","https://openalex.org/W2572193563","https://openalex.org/W4283826021","https://openalex.org/W2595760708","https://openalex.org/W3080514658","https://openalex.org/W4389544999"],"abstract_inverted_index":{"The":[0],"orthodox":[1],"paradigm":[2,167],"to":[3,40,56,59,111,117,142],"defend":[4],"against":[5],"automated":[6],"social-engineering":[7],"attacks":[8],"in":[9,72,171],"large-scale":[10],"socio-technical":[11],"systems":[12],"is":[13],"reactive":[14],"and":[15,96,113,155,180,183],"victim-agnostic.":[16],"Defenses":[17],"generally":[18],"focus":[19],"on":[20,150,168],"identifying":[21],"the":[22,35,45,51,66,76,83,99,104,123,130,136,153,156,162,165,189],"attacks/attackers":[23],"(e.g.,":[24],"phishing":[25],"emails,":[26],"social-bot":[27],"infiltrations,":[28],"malware":[29,178],"offered":[30],"for":[31],"download).":[32],"To":[33],"change":[34],"status":[36],"quo,":[37],"we":[38],"propose":[39],"identify,":[41],"even":[42],"if":[43],"imperfectly,":[44],"vulnerable":[46,67,77,105,157,190],"user":[47,91,137,176],"population,":[48],"that":[49,53],"is,":[50],"users":[52],"are":[54],"likely":[55],"fall":[57],"victim":[58],"such":[60],"attacks.":[61],"Once":[62],"identified,":[63],"information":[64,102,134],"about":[65,103,135],"population":[68,78,106,138,191],"can":[69,79,107,139,192],"be":[70,80,109,140],"used":[71,110,141],"two":[73],"ways.":[74],"First,":[75],"influenced":[81],"by":[82,129],"defender":[84],"through":[85],"several":[86],"means":[87],"including:":[88],"education,":[89],"specialized":[90],"experience,":[92],"extra":[93],"protection":[94],"layers":[95],"watchdogs.":[97],"In":[98],"same":[100],"vein,":[101],"ultimately":[108],"fine-tune":[112],"reprioritize":[114],"defense":[115,131],"mechanisms":[116],"offer":[118],"differentiated":[119],"protection,":[120],"possibly":[121],"at":[122],"cost":[124],"of":[125,164,175,188],"additional":[126],"friction":[127],"generated":[128],"mechanism.":[132],"Secondly,":[133],"identify":[143],"an":[144],"attack":[145],"(or":[146],"compromised":[147],"users)":[148],"based":[149],"differences":[151],"between":[152],"general":[154],"population.":[158],"This":[159],"paper":[160],"considers":[161],"implications":[163],"proposed":[166],"existing":[169],"defenses":[170],"three":[172],"areas":[173],"(phishing":[174],"credentials,":[177],"distribution":[179],"socialbot":[181],"infiltration)":[182],"discusses":[184],"how":[185],"using":[186],"knowledge":[187],"enable":[193],"more":[194],"robust":[195],"defenses.":[196]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}