{"id":"https://openalex.org/W3099321002","doi":"https://doi.org/10.1145/3409455","title":"An Ensemble of Ensembles Approach to Author Attribution for Internet Relay Chat Forensics","display_name":"An Ensemble of Ensembles Approach to Author Attribution for Internet Relay Chat Forensics","publication_year":2020,"publication_date":"2020-10-15","ids":{"openalex":"https://openalex.org/W3099321002","doi":"https://doi.org/10.1145/3409455","mag":"3099321002"},"language":"en","primary_location":{"id":"doi:10.1145/3409455","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3409455","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3409455","source":{"id":"https://openalex.org/S4210170305","display_name":"ACM Transactions on Management Information Systems","issn_l":"2158-656X","issn":["2158-656X","2158-6578"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Management Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3409455","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052686108","display_name":"Sicong Shao","orcid":"https://orcid.org/0000-0003-1205-3890"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Sicong Shao","raw_affiliation_strings":["NSF Center for Cloud and Autonomic Computing, University of Arizona, Tucson, AZ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NSF Center for Cloud and Autonomic Computing, University of Arizona, Tucson, AZ","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007796269","display_name":"Cihan Tunc","orcid":"https://orcid.org/0000-0001-5200-1097"},"institutions":[{"id":"https://openalex.org/I123534392","display_name":"University of North Texas","ror":"https://ror.org/00v97ad02","country_code":"US","type":"education","lineage":["https://openalex.org/I123534392"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cihan Tunc","raw_affiliation_strings":["Department of Computer Science and Engineering, University of North Texas, Denton, TX"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of North Texas, Denton, TX","institution_ids":["https://openalex.org/I123534392"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062785576","display_name":"Amany Alshawi","orcid":"https://orcid.org/0000-0002-9406-9900"},"institutions":[{"id":"https://openalex.org/I1284598098","display_name":"King Abdulaziz City for Science and Technology","ror":"https://ror.org/05tdz6m39","country_code":"SA","type":"facility","lineage":["https://openalex.org/I1284598098"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Amany Al-Shawi","raw_affiliation_strings":["National Center for Cybersecurity Technology, King Abdulaziz City for Science and Technology, Riyadh, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Center for Cybersecurity Technology, King Abdulaziz City for Science and Technology, Riyadh, Saudi Arabia","institution_ids":["https://openalex.org/I1284598098"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057335897","display_name":"Salim Hariri","orcid":"https://orcid.org/0000-0003-3956-3401"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Salim Hariri","raw_affiliation_strings":["NSF Center for Cloud and Autonomic Computing, University of Arizona, Tucson, AZ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NSF Center for Cloud and Autonomic Computing, University of Arizona, Tucson, AZ","institution_ids":["https://openalex.org/I138006243"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5052686108"],"corresponding_institution_ids":["https://openalex.org/I138006243"],"apc_list":null,"apc_paid":null,"fwci":1.0881,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":{"value":0.83191469,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"11","issue":"4","first_page":"1","last_page":"25"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7647789120674133},{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.643417239189148},{"id":"https://openalex.org/keywords/popularity","display_name":"Popularity","score":0.5943553447723389},{"id":"https://openalex.org/keywords/anonymity","display_name":"Anonymity","score":0.5454436540603638},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5451346039772034},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.46058788895606995},{"id":"https://openalex.org/keywords/attribution","display_name":"Attribution","score":0.4305141568183899},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.4116678833961487},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.384400874376297},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3801308870315552},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3257172107696533},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3244437873363495}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7647789120674133},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.643417239189148},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.5943553447723389},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.5454436540603638},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5451346039772034},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.46058788895606995},{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.4305141568183899},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4116678833961487},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.384400874376297},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3801308870315552},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3257172107696533},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3244437873363495},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3409455","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3409455","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3409455","source":{"id":"https://openalex.org/S4210170305","display_name":"ACM Transactions on Management Information Systems","issn_l":"2158-656X","issn":["2158-656X","2158-6578"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Management Information Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3409455","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3409455","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3409455","source":{"id":"https://openalex.org/S4210170305","display_name":"ACM Transactions on Management Information Systems","issn_l":"2158-656X","issn":["2158-656X","2158-6578"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Management Information Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6000000238418579}],"awards":[{"id":"https://openalex.org/G1225875991","display_name":null,"funder_award_id":"NSF-1849113","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1523888516","display_name":null,"funder_award_id":"FA9550-","funder_id":"https://openalex.org/F4320338279","funder_display_name":"Air Force Office of Scientific Research"},{"id":"https://openalex.org/G1709611726","display_name":null,"funder_award_id":"70NANB18H263","funder_id":"https://openalex.org/F4320332178","funder_display_name":"National Institute of Standards and Technology"},{"id":"https://openalex.org/G2439292468","display_name":null,"funder_award_id":"FA9550-18-1-0427","funder_id":"https://openalex.org/F4320338279","funder_display_name":"Air Force Office of Scientific Research"},{"id":"https://openalex.org/G3658716060","display_name":"Cybersecurity Scholarship-for-Service at The Unive","funder_award_id":"1303362","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5447011388","display_name":null,"funder_award_id":"NSF-1624668","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5809100787","display_name":null,"funder_award_id":"FA9550","funder_id":"https://openalex.org/F4320338279","funder_display_name":"Air Force Office of Scientific Research"},{"id":"https://openalex.org/G5889474861","display_name":null,"funder_award_id":"DUE-1303362","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6788516060","display_name":null,"funder_award_id":"1624668","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7819583231","display_name":null,"funder_award_id":"DE-NA0003946","funder_id":"https://openalex.org/F4320332369","funder_display_name":"National Nuclear Security Administration"},{"id":"https://openalex.org/G7861850912","display_name":null,"funder_award_id":"DE-NA0003946","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G7887370869","display_name":"FCTaaS: Federated Cybersecurity Testbed as a Service","funder_award_id":"1849113","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320332178","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416"},{"id":"https://openalex.org/F4320332369","display_name":"National Nuclear Security Administration","ror":"https://ror.org/03sk1we31"},{"id":"https://openalex.org/F4320338279","display_name":"Air Force Office of Scientific Research","ror":"https://ror.org/011e9bt93"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3099321002.pdf","grobid_xml":"https://content.openalex.org/works/W3099321002.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W1532325895","https://openalex.org/W1538021842","https://openalex.org/W1736726159","https://openalex.org/W1752770703","https://openalex.org/W2011038893","https://openalex.org/W2012917383","https://openalex.org/W2025882237","https://openalex.org/W2056132907","https://openalex.org/W2056614917","https://openalex.org/W2092475127","https://openalex.org/W2099419573","https://openalex.org/W2104167780","https://openalex.org/W2113268290","https://openalex.org/W2119804197","https://openalex.org/W2129364433","https://openalex.org/W2153635508","https://openalex.org/W2158295279","https://openalex.org/W2165431734","https://openalex.org/W2168069066","https://openalex.org/W2244650364","https://openalex.org/W2523542940","https://openalex.org/W2531563875","https://openalex.org/W2563531746","https://openalex.org/W2606601345","https://openalex.org/W2626498001","https://openalex.org/W2782101021","https://openalex.org/W2911964244","https://openalex.org/W2963183879","https://openalex.org/W2998958623","https://openalex.org/W3004022289","https://openalex.org/W3123442753","https://openalex.org/W3123937770","https://openalex.org/W3151491250","https://openalex.org/W4205807230","https://openalex.org/W4213009331","https://openalex.org/W4231787353","https://openalex.org/W4232478844","https://openalex.org/W4288416831","https://openalex.org/W4300056969","https://openalex.org/W6998691040"],"related_works":["https://openalex.org/W2368605798","https://openalex.org/W2518037665","https://openalex.org/W2921504876","https://openalex.org/W2183730421","https://openalex.org/W2348524959","https://openalex.org/W2477036161","https://openalex.org/W1982580243","https://openalex.org/W2368049389","https://openalex.org/W2384861574","https://openalex.org/W4294565801"],"abstract_inverted_index":{"With":[0],"the":[1,61,95,101,114,145],"advances":[2],"in":[3,23,69,75],"Internet":[4,36],"technologies":[5,18],"and":[6,33,52,66,93,139],"services,":[7],"social":[8],"media":[9],"has":[10],"been":[11],"gained":[12],"extreme":[13],"popularity,":[14],"especially":[15],"because":[16],"these":[17],"provide":[19],"potential":[20],"anonymity,":[21],"which":[22],"turn":[24],"harbors":[25],"hacker":[26],"discussion":[27],"forums,":[28],"underground":[29],"markets,":[30],"dark":[31],"web,":[32],"so":[34],"on.":[35],"relay":[37],"chat":[38],"(IRC)":[39],"is":[40,56,107,122,133,149,154],"a":[41],"real-time":[42],"communication":[43],"protocol":[44],"actively":[45],"used":[46],"by":[47,124],"cybercriminals":[48],"for":[49,136],"hacking,":[50],"cracking,":[51],"carding.":[53],"Hence,":[54],"it":[55],"particularly":[57],"urgent":[58],"to":[59],"identify":[60],"authors":[62],"of":[63,100,110,116,147],"threat":[64],"messages":[65],"malicious":[67],"activities":[68],"IRC.":[70],"Unfortunately,":[71],"author":[72,97,137],"identification":[73],"studies":[74],"IRC":[76,88,126],"remain":[77],"as":[78],"an":[79,108],"underexplored":[80],"area.":[81],"In":[82],"this":[83],"research,":[84],"we":[85],"perform":[86],"novel":[87],"text":[89],"feature":[90],"extraction":[91],"methods":[92],"propose":[94],"first":[96],"attribution":[98,138],"version":[99],"deep":[102],"forest":[103],"(DF)":[104],"model":[105],"that":[106,112,130],"ensemble":[109,117],"ensembles":[111],"utilizes":[113],"fusion":[115],"learning":[118],"techniques.":[119],"Our":[120],"approach":[121,132],"supported":[123],"autonomic":[125],"monitoring.":[127],"Experiments":[128],"show":[129],"our":[131],"highly":[134],"effective":[135],"attains":[140],"high":[141],"accuracy":[142],"even":[143],"when":[144],"number":[146],"candidates":[148],"large":[150],"while":[151],"training":[152],"data":[153],"limited.":[155]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}