{"id":"https://openalex.org/W2603454751","doi":"https://doi.org/10.1145/3052973.3053023","title":"The Role of Hosting Providers in Fighting Command and Control Infrastructure of Financial Malware","display_name":"The Role of Hosting Providers in Fighting Command and Control Infrastructure of Financial Malware","publication_year":2017,"publication_date":"2017-03-31","ids":{"openalex":"https://openalex.org/W2603454751","doi":"https://doi.org/10.1145/3052973.3053023","mag":"2603454751"},"language":"en","primary_location":{"id":"doi:10.1145/3052973.3053023","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3053023","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5019071393","display_name":"Samaneh Tajalizadehkhoob","orcid":"https://orcid.org/0009-0003-0359-2478"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Samaneh Tajalizadehkhoob","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048211807","display_name":"Carlos Ga\u00f1\u00e1n","orcid":"https://orcid.org/0000-0002-4699-3007"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Carlos Ga\u00f1\u00e1n","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041054175","display_name":"Arman Noroozian","orcid":null},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Arman Noroozian","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012946294","display_name":"Michel van Eeten","orcid":"https://orcid.org/0000-0002-0338-2812"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Michel van Eeten","raw_affiliation_strings":["Delft University of Technology, Delft, Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Delft University of Technology, Delft, Netherlands","institution_ids":["https://openalex.org/I98358874"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5019071393"],"corresponding_institution_ids":["https://openalex.org/I98358874"],"apc_list":null,"apc_paid":null,"fwci":1.5366,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.84860745,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"575","last_page":"586"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.7892000675201416},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7712423801422119},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.7147549986839294},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5886224508285522},{"id":"https://openalex.org/keywords/command-and-control","display_name":"Command and control","score":0.5612565875053406},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4707765281200409},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.44477128982543945},{"id":"https://openalex.org/keywords/data-breach","display_name":"Data breach","score":0.42946723103523254},{"id":"https://openalex.org/keywords/popularity","display_name":"Popularity","score":0.4216043949127197},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4078962206840515},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.35451820492744446},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.22191926836967468},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1753082573413849},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.11272954940795898},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.10674998164176941},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.08117157220840454}],"concepts":[{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.7892000675201416},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7712423801422119},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.7147549986839294},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5886224508285522},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.5612565875053406},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4707765281200409},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.44477128982543945},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.42946723103523254},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.4216043949127197},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4078962206840515},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.35451820492744446},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.22191926836967468},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1753082573413849},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.11272954940795898},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.10674998164176941},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.08117157220840454},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3052973.3053023","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3053023","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:tudelft.nl:uuid:b166c7cd-bfbb-4476-970e-c68566c77b58","is_oa":false,"landing_page_url":"http://resolver.tudelft.nl/uuid:b166c7cd-bfbb-4476-970e-c68566c77b58","pdf_url":null,"source":{"id":"https://openalex.org/S4306400906","display_name":"Research Repository (Delft University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98358874","host_organization_name":"Delft University of Technology","host_organization_lineage":["https://openalex.org/I98358874"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.5600000023841858}],"awards":[{"id":"https://openalex.org/G8123040233","display_name":null,"funder_award_id":"12.003/628.001.003","funder_id":"https://openalex.org/F4320321800","funder_display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek"},{"id":"https://openalex.org/G8470288590","display_name":null,"funder_award_id":"BP-A 00214","funder_id":"https://openalex.org/F4320334830","funder_display_name":"Ag\u00e8ncia de Gesti\u00f3 d'Ajuts Universitaris i de Recerca"}],"funders":[{"id":"https://openalex.org/F4320321800","display_name":"Nederlandse Organisatie voor Wetenschappelijk Onderzoek","ror":"https://ror.org/04jsz6e67"},{"id":"https://openalex.org/F4320334830","display_name":"Ag\u00e8ncia de Gesti\u00f3 d'Ajuts Universitaris i de Recerca","ror":"https://ror.org/01n4pqe45"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W403078489","https://openalex.org/W1485337887","https://openalex.org/W1809422330","https://openalex.org/W1930512120","https://openalex.org/W1976866799","https://openalex.org/W1979300931","https://openalex.org/W1984918390","https://openalex.org/W2003371939","https://openalex.org/W2034505280","https://openalex.org/W2048996446","https://openalex.org/W2054143615","https://openalex.org/W2063104870","https://openalex.org/W2066689719","https://openalex.org/W2069620139","https://openalex.org/W2073193131","https://openalex.org/W2076873241","https://openalex.org/W2091614396","https://openalex.org/W2095720311","https://openalex.org/W2100765095","https://openalex.org/W2132429838","https://openalex.org/W2144699258","https://openalex.org/W2149680913","https://openalex.org/W2201060334","https://openalex.org/W2211880739","https://openalex.org/W2340605418","https://openalex.org/W2464966933","https://openalex.org/W2564812877","https://openalex.org/W2566763766","https://openalex.org/W2593848643","https://openalex.org/W2731092512","https://openalex.org/W2997993688","https://openalex.org/W4244307638","https://openalex.org/W4293241248"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W2898126008","https://openalex.org/W86804927","https://openalex.org/W1583098994","https://openalex.org/W2386447999","https://openalex.org/W2130216882","https://openalex.org/W2091214382","https://openalex.org/W2783300127"],"abstract_inverted_index":{"<p>A":[0],"variety":[1],"of":[2,18,26,32,60,99,105,125,139,147,150,161,171,178,184,191,211,214],"botnets":[3,34,106],"are":[4,84,131],"used":[5],"in":[6,20,88,110,181,193,206],"attacks":[7,111],"on":[8,65,101,112],"financial":[9,113],"services.":[10,114],"Banks":[11],"and":[12,22,165,209],"security":[13],"firms":[14],"invest":[15],"a":[16,145,237],"lot":[17],"effort":[19],"detecting":[21],"combating":[23],"malware-assisted":[24],"takeover":[25],"customer":[27],"accounts.":[28],"A":[29],"critical":[30],"resource":[31],"these":[33],"is":[35,117],"their":[36,47,75,129],"command-and-control":[37],"(C&C)":[38],"infrastructure.":[39,49],"Attackers":[40],"rent":[41],"or":[42,86,127],"compromise":[43],"servers":[44,104],"to":[45,73,118,152,254],"operate":[46],"C&C":[48,55,103,220,233,241,262],"Hosting":[50],"providers":[51,72,82,126,151,164,215,230,258],"routinely":[52],"take":[53,231],"down":[54,90,232],"servers,":[56],"but":[57],"the":[58,70,102,135,140,154,159,168,172,179,182,189,194,226],"effectiveness":[59],"this":[61,93],"mitigation":[62],"strategy":[63],"depends":[64],"understanding":[66],"how":[67],"attackers":[68,121,251],"select":[69],"hosting":[71,141],"host":[74],"servers.":[76],"Do":[77],"they":[78],"prefer,":[79],"for":[80,257],"example,":[81],"who":[83,259],"slow":[85],"unwilling":[87],"taking":[89],"C&Cs?":[91],"In":[92],"paper,":[94],"we":[95,223],"analyze":[96],"7":[97],"years":[98],"data":[100],"that":[107,167,203,225],"have":[108,252],"engaged":[109],"Our":[115],"aim":[116],"understand":[119],"whether":[120,128],"prefer":[122],"certain":[123],"types":[124],"C&Cs":[130,162,185],"randomly":[132],"distributed":[133],"across":[134,163],"whole":[136],"attack":[137,155],"surface":[138],"industry.":[142],"We":[143,157,200],"extract":[144],"set":[146],"structural":[148],"properties":[149],"capture":[153],"surface.":[156],"model":[158],"distribution":[160],"show":[166],"mere":[169],"size":[170],"provider":[173],"can":[174],"explain":[175],"around":[176,198],"71%":[177],"variance":[180],"number":[183],"per":[186],"provider,":[187],"whereas":[188],"rule":[190],"law":[192],"country":[195],"only":[196,236,245],"explains":[197],"1%.":[199],"further":[201],"observe":[202],"price,":[204],"time":[205],"business,":[207],"popularity":[208],"ratio":[210],"vulnerable":[212],"websites":[213],"relate":[216],"signi":[217],"ficantly":[218],"with":[219,228,240],"counts.":[221],"Finally,":[222],"find":[224],"speed":[227],"which":[229],"domains":[234],"has":[235],"weak":[238],"relation":[239],"occurrence":[242],"rates,":[243],"adding":[244],"1%":[246],"explained":[247],"variance.":[248],"This":[249],"suggests":[250],"little":[253],"no":[255],"preference":[256],"allow":[260],"long-lived":[261],"domains.</p>":[263]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2017,"cited_by_count":5}],"updated_date":"2026-05-02T08:42:23.175194","created_date":"2025-10-10T00:00:00"}