{"id":"https://openalex.org/W2967704405","doi":"https://doi.org/10.1145/3339252.3339267","title":"Towards a framework for detecting advanced Web bots","display_name":"Towards a framework for detecting advanced Web bots","publication_year":2019,"publication_date":"2019-08-09","ids":{"openalex":"https://openalex.org/W2967704405","doi":"https://doi.org/10.1145/3339252.3339267","mag":"2967704405"},"language":"en","primary_location":{"id":"doi:10.1145/3339252.3339267","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3339252.3339267","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 14th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://eprints.bournemouth.ac.uk/32523/1/paper_82.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052123762","display_name":"Christos Iliou","orcid":"https://orcid.org/0000-0002-9643-5900"},"institutions":[{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]},{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]},{"id":"https://openalex.org/I9300472","display_name":"Bournemouth University","ror":"https://ror.org/05wwcw481","country_code":"GB","type":"education","lineage":["https://openalex.org/I9300472"]}],"countries":["GB","GR"],"is_corresponding":true,"raw_author_name":"Christos Iliou","raw_affiliation_strings":["Information Technologies Institute, CERTH, Thessaloniki, Greece, Dept. of Computing and Informatics, Bournemouth University, Bournemouth, United Kingdom"],"affiliations":[{"raw_affiliation_string":"Information Technologies Institute, CERTH, Thessaloniki, Greece, Dept. of Computing and Informatics, Bournemouth University, Bournemouth, United Kingdom","institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249","https://openalex.org/I9300472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041059045","display_name":"\u0398\u03b5\u03cc\u03b4\u03c9\u03c1\u03bf\u03c2 \u039a\u03c9\u03c3\u03c4\u03bf\u03cd\u03bb\u03b1\u03c2","orcid":"https://orcid.org/0000-0003-2201-6938"},"institutions":[{"id":"https://openalex.org/I9300472","display_name":"Bournemouth University","ror":"https://ror.org/05wwcw481","country_code":"GB","type":"education","lineage":["https://openalex.org/I9300472"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Theodoros Kostoulas","raw_affiliation_strings":["Dept. of Computing and Informatics, Bournemouth University, Bournemouth, United Kingdom"],"affiliations":[{"raw_affiliation_string":"Dept. of Computing and Informatics, Bournemouth University, Bournemouth, United Kingdom","institution_ids":["https://openalex.org/I9300472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045426580","display_name":"Theodora Tsikrika","orcid":"https://orcid.org/0000-0003-4148-9028"},"institutions":[{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]},{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Theodora Tsikrika","raw_affiliation_strings":["Information Technologies Institute, CERTH, Thessaloniki, Greece"],"affiliations":[{"raw_affiliation_string":"Information Technologies Institute, CERTH, Thessaloniki, Greece","institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037619435","display_name":"Vasilios Katos","orcid":"https://orcid.org/0000-0001-6132-3004"},"institutions":[{"id":"https://openalex.org/I9300472","display_name":"Bournemouth University","ror":"https://ror.org/05wwcw481","country_code":"GB","type":"education","lineage":["https://openalex.org/I9300472"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Vasilis Katos","raw_affiliation_strings":["Dept. of Computing and Informatics, Bournemouth University, Bournemouth, United Kingdom"],"affiliations":[{"raw_affiliation_string":"Dept. of Computing and Informatics, Bournemouth University, Bournemouth, United Kingdom","institution_ids":["https://openalex.org/I9300472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065313479","display_name":"Stefanos Vrochidis","orcid":"https://orcid.org/0000-0002-2505-9178"},"institutions":[{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]},{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Stefanos Vrochidis","raw_affiliation_strings":["Information Technologies Institute, CERTH, Thessaloniki, Greece"],"affiliations":[{"raw_affiliation_string":"Information Technologies Institute, CERTH, Thessaloniki, Greece","institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084122016","display_name":"Ioannis Kompatsiaris","orcid":"https://orcid.org/0000-0001-6447-9020"},"institutions":[{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]},{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Yiannis Kompatsiaris","raw_affiliation_strings":["Information Technologies Institute, CERTH, Thessaloniki, Greece"],"affiliations":[{"raw_affiliation_string":"Information Technologies Institute, CERTH, Thessaloniki, Greece","institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5052123762"],"corresponding_institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249","https://openalex.org/I9300472"],"apc_list":null,"apc_paid":null,"fwci":4.9317,"has_fulltext":false,"cited_by_count":30,"citation_normalized_percentile":{"value":0.95569473,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7796367406845093},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.5823208093643188},{"id":"https://openalex.org/keywords/web-mining","display_name":"Web mining","score":0.5557554960250854},{"id":"https://openalex.org/keywords/web-application-security","display_name":"Web application security","score":0.5373453497886658},{"id":"https://openalex.org/keywords/web-server","display_name":"Web server","score":0.4961894154548645},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.4724448323249817},{"id":"https://openalex.org/keywords/web-service","display_name":"Web service","score":0.4659467935562134},{"id":"https://openalex.org/keywords/hyperlink","display_name":"Hyperlink","score":0.4192831218242645},{"id":"https://openalex.org/keywords/web-development","display_name":"Web development","score":0.38936400413513184},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.37726324796676636},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.32200610637664795}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7796367406845093},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.5823208093643188},{"id":"https://openalex.org/C197046077","wikidata":"https://www.wikidata.org/wiki/Q785337","display_name":"Web mining","level":3,"score":0.5557554960250854},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.5373453497886658},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.4961894154548645},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.4724448323249817},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.4659467935562134},{"id":"https://openalex.org/C30088001","wikidata":"https://www.wikidata.org/wiki/Q102014","display_name":"Hyperlink","level":3,"score":0.4192831218242645},{"id":"https://openalex.org/C79373723","wikidata":"https://www.wikidata.org/wiki/Q386275","display_name":"Web development","level":3,"score":0.38936400413513184},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37726324796676636},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.32200610637664795}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3339252.3339267","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3339252.3339267","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 14th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:eprints.bournemouth.ac.uk:32523","is_oa":true,"landing_page_url":null,"pdf_url":"http://eprints.bournemouth.ac.uk/32523/1/paper_82.pdf","source":{"id":"https://openalex.org/S4306400187","display_name":"Bournemouth University Research Online (Bournemouth University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I9300472","host_organization_name":"Bournemouth University","host_organization_lineage":["https://openalex.org/I9300472"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"},{"id":"pmh:oai:zenodo.org:3385930","is_oa":true,"landing_page_url":"https://zenodo.org/record/3385930","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"}],"best_oa_location":{"id":"pmh:oai:eprints.bournemouth.ac.uk:32523","is_oa":true,"landing_page_url":null,"pdf_url":"http://eprints.bournemouth.ac.uk/32523/1/paper_82.pdf","source":{"id":"https://openalex.org/S4306400187","display_name":"Bournemouth University Research Online (Bournemouth University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I9300472","host_organization_name":"Bournemouth University","host_organization_lineage":["https://openalex.org/I9300472"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1866852742","display_name":null,"funder_award_id":"700024","funder_id":"https://openalex.org/F4320338350","funder_display_name":"H2020 Security"},{"id":"https://openalex.org/G3130361054","display_name":"Retrieval and Analysis of Heterogeneous Online Content for Terrorist Activity Recognition","funder_award_id":"700024","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G4025657908","display_name":null,"funder_award_id":"778229","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G4937468798","display_name":null,"funder_award_id":"H2020","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320338350","display_name":"H2020 Security","ror":null}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2967704405.pdf"},"referenced_works_count":33,"referenced_works":["https://openalex.org/W1500920619","https://openalex.org/W1603565383","https://openalex.org/W1778642511","https://openalex.org/W1781642226","https://openalex.org/W1980531291","https://openalex.org/W2014915963","https://openalex.org/W2024673222","https://openalex.org/W2045726900","https://openalex.org/W2053859771","https://openalex.org/W2056682017","https://openalex.org/W2068326462","https://openalex.org/W2084585486","https://openalex.org/W2114926124","https://openalex.org/W2153440728","https://openalex.org/W2158698691","https://openalex.org/W2163981004","https://openalex.org/W2221925709","https://openalex.org/W2241336829","https://openalex.org/W2271053476","https://openalex.org/W2330031883","https://openalex.org/W2350778671","https://openalex.org/W2488877819","https://openalex.org/W2556283912","https://openalex.org/W2565517508","https://openalex.org/W2609130530","https://openalex.org/W2624238479","https://openalex.org/W2751619797","https://openalex.org/W2886083099","https://openalex.org/W2903371220","https://openalex.org/W2911408902","https://openalex.org/W3094232994","https://openalex.org/W4289038676","https://openalex.org/W4299301436"],"related_works":["https://openalex.org/W2379693035","https://openalex.org/W2913452075","https://openalex.org/W2240248956","https://openalex.org/W2182629206","https://openalex.org/W141438787","https://openalex.org/W3174726539","https://openalex.org/W3005817867","https://openalex.org/W2950631850","https://openalex.org/W2141074612","https://openalex.org/W2620492824"],"abstract_inverted_index":{"Automated":[0],"programs":[1],"(bots)":[2],"are":[3,103],"responsible":[4],"for":[5,18,40,44,98,129],"a":[6,113,156,188,223,236,242],"large":[7],"percentage":[8],"of":[9,28,60,101,115],"website":[10],"traffic.":[11],"These":[12],"bots":[13,102,140,167,206,233],"can":[14],"either":[15,105],"be":[16],"used":[17,97],"benign":[19],"purposes,":[20],"such":[21,85],"as":[22,86,245],"Web":[23,35,72,130,139,157,175,190,205,218,232],"indexing,":[24],"Website":[25],"monitoring":[26],"(validation":[27],"hyperlinks":[29],"and":[30,37,66,79,117,154,239],"HTML":[31],"code),":[32],"feed":[33],"fetching":[34],"content":[36,52],"data":[38],"extraction":[39],"commercial":[41],"use":[42],"or":[43,90,112],"malicious":[45],"ones,":[46],"including,":[47],"but":[48],"not":[49,209],"limited":[50],"to,":[51],"scraping,":[53],"vulnerability":[54],"scanning,":[55],"account":[56],"takeover,":[57],"distributed":[58],"denial":[59],"service":[61],"attacks,":[62],"marketing":[63],"fraud,":[64],"carding":[65],"spam.":[67],"To":[68],"ensure":[69],"their":[70,88,213],"security,":[71],"servers":[73],"try":[74,142,210],"to":[75,83,143,164,172,203,211],"identify":[76],"bot":[77,109,131,158,214],"sessions":[78],"apply":[80],"special":[81],"rules":[82],"them,":[84],"throttling":[87],"requests":[89],"delivering":[91],"different":[92],"content.":[93],"The":[94],"methods":[95,128],"currently":[96],"the":[99,179,197],"identification":[100],"based":[104],"purely":[106],"on":[107,161],"rule-based":[108,116],"detection":[110,159],"techniques":[111],"combination":[114],"machine":[118],"learning":[119],"techniques.":[120],"While":[121],"current":[122],"research":[123],"has":[124,200],"developed":[125],"highly":[126],"adequate":[127],"detection,":[132],"these":[133],"methods'":[134],"adequacy":[135],"when":[136],"faced":[137],"with":[138],"that":[141,196,207,234],"remain":[144],"undetected":[145],"hasn't":[146],"been":[147],"studied.":[148],"For":[149],"this":[150],"reason,":[151],"we":[152],"created":[153],"evaluated":[155],"framework":[160,181,199],"its":[162,170],"ability":[163,171,202],"detect":[165,173,204],"conspicuous":[166],"separately":[168],"from":[169,187],"advanced":[174,231],"bots.":[176],"We":[177],"assessed":[178],"proposed":[180,198],"performance":[182],"using":[183,216],"real":[184],"HTTP":[185,217],"traffic":[186],"public":[189],"server.":[191],"Our":[192],"experimental":[193],"results":[194],"show":[195],"significant":[201],"do":[208],"hide":[212],"identity":[215],"logs":[219],"(balanced":[220],"accuracy":[221],"in":[222],"false-positive":[224],"intolerant":[225],"server":[226],">":[227],"95%).":[228],"However,":[229],"detecting":[230],"present":[235,241],"browser":[237],"fingerprint":[238],"may":[240],"humanlike":[243],"behaviour":[244],"well":[246],"is":[247],"considerably":[248],"more":[249],"difficult.":[250]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":3}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}