{"id":"https://openalex.org/W2765629210","doi":"https://doi.org/10.1145/3128572.3140455","title":"An Early Warning System for Suspicious Accounts","display_name":"An Early Warning System for Suspicious Accounts","publication_year":2017,"publication_date":"2017-11-03","ids":{"openalex":"https://openalex.org/W2765629210","doi":"https://doi.org/10.1145/3128572.3140455","mag":"2765629210"},"language":"en","primary_location":{"id":"doi:10.1145/3128572.3140455","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3128572.3140455","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011613970","display_name":"Hassan H. Halawa","orcid":null},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Hassan Halawa","raw_affiliation_strings":["University of British Columbia, Vancouver, BC, Canada"],"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, BC, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088755273","display_name":"Matei Ripeanu","orcid":"https://orcid.org/0000-0001-9839-3866"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Matei Ripeanu","raw_affiliation_strings":["University of British Columbia, Vancouver, BC, Canada"],"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, BC, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035380853","display_name":"Konstantin Beznosov","orcid":"https://orcid.org/0000-0002-1327-7477"},"institutions":[{"id":"https://openalex.org/I141945490","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20","country_code":"CA","type":"education","lineage":["https://openalex.org/I141945490"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Konstantin Beznosov","raw_affiliation_strings":["University of British Columbia, Vancouver, BC, Canada"],"affiliations":[{"raw_affiliation_string":"University of British Columbia, Vancouver, BC, Canada","institution_ids":["https://openalex.org/I141945490"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053106292","display_name":"Bar\u0131\u015f Co\u015fkun","orcid":"https://orcid.org/0000-0001-6179-1481"},"institutions":[{"id":"https://openalex.org/I4210134091","display_name":"Yahoo (United States)","ror":"https://ror.org/040dkzz12","country_code":"US","type":"company","lineage":["https://openalex.org/I4210134091"]},{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Baris Coskun","raw_affiliation_strings":["Amazon AI & Yahoo Research, New York, NY, USA"],"affiliations":[{"raw_affiliation_string":"Amazon AI & Yahoo Research, New York, NY, USA","institution_ids":["https://openalex.org/I1311688040","https://openalex.org/I4210134091"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016087081","display_name":"Meizhu Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210134091","display_name":"Yahoo (United States)","ror":"https://ror.org/040dkzz12","country_code":"US","type":"company","lineage":["https://openalex.org/I4210134091"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Meizhu Liu","raw_affiliation_strings":["Yahoo Research, New York, NY, USA"],"affiliations":[{"raw_affiliation_string":"Yahoo Research, New York, NY, USA","institution_ids":["https://openalex.org/I4210134091"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5011613970"],"corresponding_institution_ids":["https://openalex.org/I141945490"],"apc_list":null,"apc_paid":null,"fwci":1.4509,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.87316217,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"51","last_page":"52"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/login","display_name":"Login","score":0.8410165905952454},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7425221800804138},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6317502856254578},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.5746882557868958},{"id":"https://openalex.org/keywords/warning-system","display_name":"Warning system","score":0.5324465036392212},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5320549607276917},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.5173879861831665},{"id":"https://openalex.org/keywords/early-warning-system","display_name":"Early warning system","score":0.45951926708221436},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.42797166109085083},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.10961470007896423},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.07791268825531006}],"concepts":[{"id":"https://openalex.org/C113324615","wikidata":"https://www.wikidata.org/wiki/Q472302","display_name":"Login","level":2,"score":0.8410165905952454},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7425221800804138},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6317502856254578},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.5746882557868958},{"id":"https://openalex.org/C29825287","wikidata":"https://www.wikidata.org/wiki/Q1427940","display_name":"Warning system","level":2,"score":0.5324465036392212},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5320549607276917},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.5173879861831665},{"id":"https://openalex.org/C2779296788","wikidata":"https://www.wikidata.org/wiki/Q5326904","display_name":"Early warning system","level":3,"score":0.45951926708221436},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.42797166109085083},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.10961470007896423},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.07791268825531006},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3128572.3140455","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3128572.3140455","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320323180","display_name":"University of British Columbia","ror":"https://ror.org/03rmrcq20"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W2090212887","https://openalex.org/W2141985040","https://openalex.org/W2335888457","https://openalex.org/W2397135192","https://openalex.org/W2516063120"],"related_works":["https://openalex.org/W2019221308","https://openalex.org/W2366686155","https://openalex.org/W1044530532","https://openalex.org/W2383173999","https://openalex.org/W2899102479","https://openalex.org/W3125817379","https://openalex.org/W2369926976","https://openalex.org/W2381743810","https://openalex.org/W2349162035","https://openalex.org/W2402451758"],"abstract_inverted_index":{"In":[0],"the":[1,22,30,37,70,77,89],"face":[2],"of":[3,15,24,72,79,84,93,114,116,142,161],"large-scale":[4,53,104],"automated":[5,45],"cyber-attacks":[6],"to":[7,20,28,33,51,57],"large":[8],"online":[9,54,105],"services,":[10],"fast":[11],"detection":[12,71],"and":[13,27,36,82,91,132],"remediation":[14,83],"compromised":[16,61,85],"accounts":[17,144],"are":[18,149],"crucial":[19],"limit":[21],"spread":[23],"new":[25],"attacks":[26],"mitigate":[29],"overall":[31],"damage":[32],"users,":[34],"companies,":[35],"public":[38],"at":[39,102],"large.":[40],"We":[41,63,87,118],"advocate":[42],"a":[43,98,103,133,152],"fully":[44],"approach":[46,137],"based":[47,156],"on":[48,157],"machine":[49],"learning":[50],"enable":[52],"service":[55,106],"providers":[56],"quickly":[58],"identify":[59],"potentially":[60],"accounts.":[62,86],"develop":[64],"an":[65],"early":[66],"warning":[67],"system":[68,96],"for":[69],"suspicious":[73,148],"account":[74],"activity":[75],"with":[76,128],"goal":[78],"quick":[80],"identification":[81],"demonstrate":[88],"feasibility":[90],"applicability":[92],"our":[94],"proposed":[95],"in":[97,154],"four":[99],"month":[100,153],"experiment":[101],"provider":[107],"using":[108,123],"real-world":[109],"production":[110],"data":[111],"encompassing":[112],"hundreds":[113],"millions":[115],"users.":[117],"show":[119],"that":[120],"-":[121,138],"even":[122],"only":[124],"login":[125,163],"data,":[126],"features":[127],"low":[129],"computational":[130],"cost,":[131],"basic":[134],"model":[135],"selection":[136],"around":[139],"one":[140,158],"out":[141],"five":[143],"later":[145],"flagged":[146],"as":[147],"correctly":[150],"predicted":[151],"advance":[155],"week's":[159],"worth":[160],"their":[162],"activity.":[164]},"counts_by_year":[{"year":2023,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}