{"id":"https://openalex.org/W4298869031","doi":"https://doi.org/10.1145/3133956.3134002","title":"Hiding in Plain Sight","display_name":"Hiding in Plain Sight","publication_year":2017,"publication_date":"2017-10-27","ids":{"openalex":"https://openalex.org/W4298869031","doi":"https://doi.org/10.1145/3133956.3134002"},"language":"en","primary_location":{"id":"doi:10.1145/3133956.3134002","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3133956.3134002","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3134002&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=3134002&type=pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031597177","display_name":"Panagiotis Kintis","orcid":"https://orcid.org/0000-0002-5617-7417"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Panagiotis Kintis","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074373977","display_name":"Najmeh Miramirkhani","orcid":null},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Najmeh Miramirkhani","raw_affiliation_strings":["Stony Brook University, Brookhaven, NY, USA"],"affiliations":[{"raw_affiliation_string":"Stony Brook University, Brookhaven, NY, USA","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000942801","display_name":"Charles Lever","orcid":"https://orcid.org/0000-0002-6148-8981"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Charles Lever","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101433146","display_name":"Yizheng Chen","orcid":"https://orcid.org/0000-0001-8799-2580"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yizheng Chen","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091360779","display_name":"Rosa Romero-G\u00f3mez","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rosa Romero-G\u00f3mez","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082150685","display_name":"Nikolaos Pitropakis","orcid":"https://orcid.org/0000-0002-3392-9970"},"institutions":[{"id":"https://openalex.org/I28257850","display_name":"London South Bank University","ror":"https://ror.org/02vwnat91","country_code":"GB","type":"education","lineage":["https://openalex.org/I28257850"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Nikolaos Pitropakis","raw_affiliation_strings":["London South Bank University, London, United Kingdom"],"affiliations":[{"raw_affiliation_string":"London South Bank University, London, United Kingdom","institution_ids":["https://openalex.org/I28257850"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014031812","display_name":"Nick Nikiforakis","orcid":"https://orcid.org/0000-0002-9366-357X"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nick Nikiforakis","raw_affiliation_strings":["Stony Brook University, Brookhaven, NY, USA"],"affiliations":[{"raw_affiliation_string":"Stony Brook University, Brookhaven, NY, USA","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067105657","display_name":"Manos Antonakakis","orcid":"https://orcid.org/0000-0003-1578-8307"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Manos Antonakakis","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA"],"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5031597177"],"corresponding_institution_ids":["https://openalex.org/I130701444"],"apc_list":null,"apc_paid":null,"fwci":21.2471,"has_fulltext":true,"cited_by_count":104,"citation_normalized_percentile":{"value":0.99362118,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"569","last_page":"586"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sight","display_name":"Sight","score":0.6707961559295654},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.47286176681518555},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.3652627766132355},{"id":"https://openalex.org/keywords/astronomy","display_name":"Astronomy","score":0.17917150259017944},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.09744924306869507}],"concepts":[{"id":"https://openalex.org/C1517167","wikidata":"https://www.wikidata.org/wiki/Q1134322","display_name":"Sight","level":2,"score":0.6707961559295654},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.47286176681518555},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.3652627766132355},{"id":"https://openalex.org/C1276947","wikidata":"https://www.wikidata.org/wiki/Q333","display_name":"Astronomy","level":1,"score":0.17917150259017944},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.09744924306869507}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3133956.3134002","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3133956.3134002","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3134002&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3133956.3134002","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3133956.3134002","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3134002&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6000000238418579}],"awards":[{"id":"https://openalex.org/G1238842659","display_name":null,"funder_award_id":"2106DGX","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1627045951","display_name":"TWC: Small: Emerging Attacks Against the Mobile Web and Novel Proxy Technologies for Their Containment","funder_award_id":"1617593","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1871686341","display_name":null,"funder_award_id":"2106DGX,CNS-1617902,CNS-1617593,CNS-1735396","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4787803700","display_name":"EAGER:   Measuring the Stability of Web Links","funder_award_id":"1735396","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4868500062","display_name":null,"funder_award_id":"2106DTX","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G495278493","display_name":null,"funder_award_id":"2106DEK","funder_id":"https://openalex.org/F4320306111","funder_display_name":"U.S. Department of Commerce"},{"id":"https://openalex.org/G5501761068","display_name":null,"funder_award_id":"4-16-1-","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G7888824482","display_name":null,"funder_award_id":"2106DEK, 2106DZD","funder_id":"https://openalex.org/F4320306111","funder_display_name":"U.S. Department of Commerce"},{"id":"https://openalex.org/G8102380484","display_name":null,"funder_award_id":"N00014-16-1-2264","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8797752025","display_name":"TWC: Small: Combating Environment-aware Malware","funder_award_id":"1617902","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G886360076","display_name":null,"funder_award_id":"CNS-1617593","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8876996369","display_name":null,"funder_award_id":"N00014","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306111","display_name":"U.S. Department of Commerce","ror":"https://ror.org/04chq2495"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320332815","display_name":"Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"},{"id":"https://openalex.org/F4320338294","display_name":"Air Force Research Laboratory","ror":"https://ror.org/02e2egq70"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4298869031.pdf","grobid_xml":"https://content.openalex.org/works/W4298869031.grobid-xml"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W57130263","https://openalex.org/W128912056","https://openalex.org/W155384935","https://openalex.org/W1498756827","https://openalex.org/W1501503468","https://openalex.org/W1546563748","https://openalex.org/W1550557446","https://openalex.org/W1561983441","https://openalex.org/W1600184236","https://openalex.org/W1637101047","https://openalex.org/W1954903228","https://openalex.org/W1984816986","https://openalex.org/W1990497396","https://openalex.org/W1998458784","https://openalex.org/W1998843210","https://openalex.org/W2053774863","https://openalex.org/W2083055907","https://openalex.org/W2094257886","https://openalex.org/W2146729596","https://openalex.org/W2164493228","https://openalex.org/W2165109377","https://openalex.org/W2184387311","https://openalex.org/W2220630516","https://openalex.org/W2401054255","https://openalex.org/W2477506845","https://openalex.org/W2518248186","https://openalex.org/W2533677686","https://openalex.org/W2535407856","https://openalex.org/W2583957212","https://openalex.org/W2614012654","https://openalex.org/W2886313391","https://openalex.org/W3017060764","https://openalex.org/W3098142495","https://openalex.org/W3100545544","https://openalex.org/W4213362721","https://openalex.org/W4231879123","https://openalex.org/W4299961062","https://openalex.org/W4300958237","https://openalex.org/W6635537036"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W3214178347","https://openalex.org/W2353119552","https://openalex.org/W2364379655","https://openalex.org/W2808673637","https://openalex.org/W2408516727","https://openalex.org/W2990201137","https://openalex.org/W4247920850"],"abstract_inverted_index":{"Domain":[0],"squatting":[1,29],"is":[2,112,141],"a":[3,24,40,116,142],"common":[4],"adversarial":[5],"practice":[6],"where":[7],"attackers":[8,35],"register":[9,36],"domain":[10,28],"names":[11],"that":[12,38,81,110,139,145],"are":[13],"purposefully":[14],"similar":[15],"to":[16,114],"popular":[17,41],"domains.":[18],"In":[19],"this":[20],"work,":[21],"we":[22,97,108],"study":[23,57],"specific":[25],"type":[26],"of":[27,58,84,118,121],"called":[30],"\"combosquatting,":[31],"\"":[32],"in":[33],"which":[34],"domains":[37,87],"combine":[39],"trademark":[42,129],"with":[43,102],"one":[44],"or":[45],"more":[46,62,90],"phrases":[47],"(e.g.,":[48],"betterfacebook[.]com,":[49],"youtube-live[.]com).":[50],"We":[51,79],"perform":[52,115],"the":[53,150],"first":[54],"largescale,":[55],"empirical":[56],"combosquatting":[59,86,103,111,140],"by":[60,149],"analyzing":[61],"than":[63,91],"468":[64],"billion":[65],"DNS":[66,72],"records-collected":[67],"from":[68],"passive":[69],"and":[70,94,131],"active":[71],"data":[73],"sources":[74],"over":[75,105],"almost":[76,82],"six":[77],"years.":[78],"find":[80],"60%":[83],"abusive":[85],"live":[88],"for":[89],"1,000":[92],"days,":[93],"even":[95,132],"worse,":[96],"observe":[98],"increased":[99,147],"activity":[100],"associated":[101],"year":[104],"year.":[106],"Moreover,":[107],"show":[109],"used":[113],"spectrum":[117],"different":[119],"types":[120],"abuse":[122],"including":[123],"phishing,":[124],"social":[125],"engineering,":[126],"affiliate":[127],"abuse,":[128,130],"advanced":[133],"persistent":[134],"threats.":[135],"Our":[136],"results":[137],"suggest":[138],"real":[143],"problem":[144],"requires":[146],"scrutiny":[148],"security":[151],"community.":[152]},"counts_by_year":[{"year":2025,"cited_by_count":16},{"year":2024,"cited_by_count":18},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":18},{"year":2019,"cited_by_count":14},{"year":2018,"cited_by_count":10}],"updated_date":"2026-04-21T08:09:41.155169","created_date":"2022-10-02T00:00:00"}