{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,11]],"date-time":"2025-12-11T07:34:41Z","timestamp":1765438481185,"version":"3.37.3"},"reference-count":41,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2017,2,7]],"date-time":"2017-02-07T00:00:00Z","timestamp":1486425600000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Neural Process Lett"],"published-print":{"date-parts":[[2017,10]]},"DOI":"10.1007\/s11063-017-9593-7","type":"journal-article","created":{"date-parts":[[2017,2,7]],"date-time":"2017-02-07T07:56:58Z","timestamp":1486454218000},"page":"411-425","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":20,"title":["Optimization Based Clustering Algorithms for Authorship Analysis of Phishing Emails"],"prefix":"10.1007","volume":"46","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5325-9724","authenticated-orcid":false,"given":"Sattar","family":"Seifollahi","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Adil","family":"Bagirov","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Robert","family":"Layton","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Iqbal","family":"Gondal","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,2,7]]},"reference":[{"issue":"5","key":"9593_CR1","doi-asserted-by":"crossref","first-page":"67","DOI":"10.1109\/MIS.2005.81","volume":"20","author":"A Abbasi","year":"2005","unstructured":"Abbasi A, Chen H (2005) Applying authorship analysis to extremist group web forum messages. IEEE Intell Syst 20(5):67\u201375","journal-title":"IEEE Intell Syst"},{"key":"9593_CR2","doi-asserted-by":"crossref","unstructured":"Abu-Nimeh S, Nappa D, Wang X, Nair S (2007) A comparison of machine learning techniques for phishing detection. In: Proceedings of the anti-phishing working groups 2nd annual eCrime researchers summit (eCrime 07), New York, USA, pp 60\u201369","DOI":"10.1145\/1299015.1299021"},{"key":"9593_CR3","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-319-08114-4","volume-title":"Introduction to nonsmooth optimization: theory, practice and software","author":"AM Bagirov","year":"2014","unstructured":"Bagirov AM, Karmitsa N, M\u00e4kel\u00e4 M (2014) Introduction to nonsmooth optimization: theory, practice and software. Springer, Heidelberg"},{"key":"9593_CR4","doi-asserted-by":"crossref","first-page":"99","DOI":"10.1007\/978-3-319-09259-1_4","volume-title":"Partitional clustering algorithms","author":"AM Bagirov","year":"2015","unstructured":"Bagirov AM, Mohebi E (2015) Nonsmooth optimization based algorithms in cluster analysis. In: Celebi Emre M (ed) Partitional clustering algorithms. Springer, Berlin, pp 99\u2013146"},{"key":"9593_CR5","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/BF02578945","volume":"11","author":"AM Bagirov","year":"2003","unstructured":"Bagirov AM, Rubinov AM, Soukhoroukova NV, Yearwood J (2003) Unsupervised and supervised data classification via nonsmooth and global optimization. Top 11:1\u201393","journal-title":"Top"},{"key":"9593_CR6","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1016\/j.patcog.2015.11.011","volume":"53","author":"AM Bagirov","year":"2016","unstructured":"Bagirov AM, Taheri S, Ugon J (2016) Nonsmooth DC programming approach to the minimum sum-of-squares clustering problems. Pattern Recognit 53:12\u201324","journal-title":"Pattern Recognit"},{"issue":"2","key":"9593_CR7","doi-asserted-by":"crossref","first-page":"578","DOI":"10.1016\/j.ejor.2004.06.014","volume":"170","author":"AM Bagirov","year":"2006","unstructured":"Bagirov AM, Yearwood J (2006) A new nonsmooth optimization algorithm for minimum sum-of-squares clustering problems. Eur J Oper Res 170(2):578\u2013596","journal-title":"Eur J Oper Res"},{"key":"9593_CR8","doi-asserted-by":"crossref","first-page":"373","DOI":"10.1007\/978-3-540-77465-5_19","volume-title":"Soft computing applications in industry","author":"R Basnet","year":"2008","unstructured":"Basnet R, Mukkamala S, Sung AH (2008) Detection of phishing attacks: a machine learning approach. In: Prasad B (ed) Soft computing applications in industry. Springer, Berlin, pp 373\u2013383"},{"key":"9593_CR9","unstructured":"Berger A, Caruana R, Cohn D, Freitag D, Mittal V (2010) Bridging the lexical chasm: statistical approaches to answer-finding. In: Proceedings of the 23rd annual international ACM SIGIR conference on research and development in information retrieval, New York, USA, pp 192\u2013199"},{"key":"9593_CR10","doi-asserted-by":"crossref","unstructured":"Dingledine R, Mathewson N, Syverson P (2004) Tor: the second-generation onion router. In: Proceedings of the 13th USENIX security symposium, vol 13. USENIX Association Berkeley, Berkeley, CA, USA","DOI":"10.21236\/ADA465464"},{"key":"9593_CR11","unstructured":"Frantzeskou G, Gritzalis S, Macdonell SG (2004) Source code authorship analysis for supporting the cybercrime investigation process. In: Proceedings of the first international conference on e-business and telecommunications networks (ICETE 04). Institute for Systems and Technologies of Information, Control and Communication (INSTICC), pp 85\u201392"},{"key":"9593_CR12","doi-asserted-by":"crossref","first-page":"508","DOI":"10.1007\/0-387-34224-9_59","volume":"204","author":"G Frantzeskou","year":"2006","unstructured":"Frantzeskou G, Stamatatos E, Gritzalis S, Katsikas S (2006) Source code author identification based on $$n$$ n -gram author profiles. Artif Intell Appl Innov 204:508\u2013515","journal-title":"Artif Intell Appl Innov"},{"issue":"4","key":"9593_CR13","doi-asserted-by":"crossref","first-page":"301","DOI":"10.1109\/TDSC.2006.50","volume":"3","author":"AY Fu","year":"2006","unstructured":"Fu AY, Liu W, Xiaotie D (2006) Detecting phishing web pages with visual similarity assessment based on earth mover\u2019s distance (EMD). IEEE Trans Dependable Secur Comput 3(4):301\u2013311","journal-title":"IEEE Trans Dependable Secur Comput"},{"key":"9593_CR14","unstructured":"Anti-Phishing\u00a0Working Group (2014) Phishing activity trends report 2nd quarter 2014. APWG Industry Advisory. http:\/\/www.antiphishing.org\/"},{"key":"9593_CR15","doi-asserted-by":"crossref","unstructured":"Herrmann D, Wendolsky R, Federrath H (2009) Website fingerprinting: attacking popular privacy enhancing technologies with the multinomial Naive\u2013Bayes classifier. In: Proceedings of the 2009 ACM cloud computing security workshop (CCSW \u201909), pp 31\u201342","DOI":"10.1145\/1655008.1655013"},{"issue":"1","key":"9593_CR16","doi-asserted-by":"crossref","first-page":"91","DOI":"10.2307\/2982671","volume":"155","author":"D Holmes","year":"1992","unstructured":"Holmes D (1992) A stylometric analysis of mormon scripture and related texts. J R Stat Soc 155(1):91\u2013120","journal-title":"J R Stat Soc"},{"issue":"2","key":"9593_CR17","doi-asserted-by":"crossref","first-page":"87","DOI":"10.1007\/BF01830689","volume":"28","author":"D Holmes","year":"1994","unstructured":"Holmes D (1994) Authorship attribution. Comput Humanit 28(2):87\u2013106","journal-title":"Comput Humanit"},{"issue":"3","key":"9593_CR18","doi-asserted-by":"crossref","first-page":"264","DOI":"10.1145\/331499.331504","volume":"31","author":"AK Jain","year":"1999","unstructured":"Jain AK, Murty MN, Flynn PJ (1999) Data clustering: a review. ACM Comput Surv 31(3):264\u2013323","journal-title":"ACM Comput Surv"},{"key":"9593_CR19","unstructured":"Juola P (2004) Ad-hoc authorship attribution competition. In: Proceedings of the joint international conference of the association for literary and linguistic computing and the Association for Computers and the Humanities (ALLC\/ACH), pp 175\u2013176"},{"key":"9593_CR20","unstructured":"Kilgour R, Gray A, Sallis P, MacDonell S (1997) A fuzzy logic approach to computer software source code authorship analysis. In: International conference on neural information processing and intelligent information systems, pp 865\u2013868"},{"key":"9593_CR21","doi-asserted-by":"crossref","unstructured":"Kim Y-G, Cho S, Lee J-S, Lee M-S, Kim I, Kim S (2008) Method for evaluating the security risk of a website against phishing attacks. In: Yang C, Chen H, Chau M, Chang K, Lang Sh-D, Chen PS, Hsieh R, Zeng D, Wang F-Y, Carley K, Mao W, Zhan J (eds) Lecture notes in computer science: intelligence and security informatics, vol 5075. Springer, Berlin, pp 21\u201331","DOI":"10.1007\/978-3-540-69304-8_3"},{"key":"9593_CR22","doi-asserted-by":"crossref","first-page":"233","DOI":"10.1016\/S0167-4048(97)00005-9","volume":"16","author":"I Krsul","year":"1997","unstructured":"Krsul I, Spafford E (1997) Authorship analysis: identifying the author of a program. Comput Secur 16:233\u2013257","journal-title":"Comput Secur"},{"key":"9593_CR23","doi-asserted-by":"crossref","unstructured":"Layton R, Watters P, Dazeley R (2010) Authorship attribution for twitter in 140 characters or less. In: Second cybercrime and trustworthy computing workshop (CTC). IEEE, Los Alamitos, pp 1\u20138","DOI":"10.1109\/CTC.2010.17"},{"key":"9593_CR24","doi-asserted-by":"crossref","unstructured":"Layton R, Watters P, Dazeley R. (2010) Automatically determining phishing campaigns using the USCAP methodology. In: eCrime researchers summit (eCrime). IEEE, Los Alamitos, pp 1\u20138","DOI":"10.1109\/ecrime.2010.5706698"},{"issue":"3","key":"9593_CR25","doi-asserted-by":"crossref","first-page":"293","DOI":"10.1017\/S1351324911000180","volume":"18","author":"R Layton","year":"2012","unstructured":"Layton R, Watters P, Dazeley R (2012) Recentred local profiles for authorship attribution. J Nat Lang Eng 18(3):293\u2013312","journal-title":"J Nat Lang Eng"},{"key":"9593_CR26","doi-asserted-by":"crossref","unstructured":"Layton R, Watters P, Dazeley R (2012) Unsupervised authorship analysis of phishing webpages. In: International symposium on communications and information technologies (ISCIT). IEEE, pp 1104\u20131109","DOI":"10.1109\/ISCIT.2012.6380857"},{"key":"9593_CR27","volume-title":"Cybercrime: security and surveillance in the information age","author":"BD Loader","year":"2000","unstructured":"Loader BD, Thomas D (2000) Cybercrime: security and surveillance in the information age. Routledge, London"},{"issue":"1","key":"9593_CR28","doi-asserted-by":"crossref","first-page":"35","DOI":"10.1093\/llc\/fqq013","volume":"26","author":"K Luyckx","year":"2010","unstructured":"Luyckx K, Daelemans W (2010) The effect of author set size and data size in authorship attribution. Lit Linguist Comput 26(1):35\u201355","journal-title":"Lit Linguist Comput"},{"key":"9593_CR29","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1007\/978-3-642-01393-5_3","volume-title":"Intelligence and security informatics","author":"J Ma","year":"2009","unstructured":"Ma J, Teng G, Zhang Y, Li Y, Li Y (2009) A cybercrime forensic method for Chinese web information authorship analysis. In: Chen H, Yang CC, Chau M, Li S-H (eds) Intelligence and security informatics. Springer, Berlin, pp 14\u201324"},{"key":"9593_CR30","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9780511809071","volume-title":"Introduction to information retrieval","author":"CD Manning","year":"2008","unstructured":"Manning CD, Raghavan P, Schutze H (2008) Introduction to information retrieval. Cambridge University Press, Cambridge"},{"issue":"4","key":"9593_CR31","doi-asserted-by":"crossref","first-page":"235","DOI":"10.1093\/ijl\/3.4.235","volume":"3","author":"GA Miller","year":"1990","unstructured":"Miller GA, Beckwith R, Fellbaum CD, Gross D, Miller K (1990) Wordnet: an online lexical database. Int J Lexicogr 3(4):235\u2013244","journal-title":"Int J Lexicogr"},{"key":"9593_CR32","doi-asserted-by":"crossref","unstructured":"Moore T, Clayton R (2007) Examining the impact of website take-down on phishing. In: Proceedings of the anti-phishing working groups 2nd annual eCrime researchers summit, New York, USA, pp 1\u201313","DOI":"10.1145\/1299015.1299016"},{"issue":"302","key":"9593_CR33","first-page":"275","volume":"58","author":"F Mosteller","year":"1963","unstructured":"Mosteller F, Wallace DL (1963) Inference in an authorship problem. J Am Stat Assoc 58(302):275\u2013309","journal-title":"J Am Stat Assoc"},{"key":"9593_CR34","doi-asserted-by":"crossref","first-page":"341","DOI":"10.1007\/s10898-014-0171-5","volume":"61","author":"B Ordin","year":"2015","unstructured":"Ordin B, Bagirov AM (2015) A heuristic algorithm for solving the minimum sum-of-squares clustering problems. J Glob Optim 61:341\u2013361","journal-title":"J Glob Optim"},{"key":"9593_CR35","doi-asserted-by":"crossref","unstructured":"Pillay S, Solorio T (2010) Authorship attribution of web forum posts. In: eCrime researchers summit (eCrime). IEEE, pp 1\u20137","DOI":"10.1109\/ecrime.2010.5706693"},{"key":"9593_CR36","doi-asserted-by":"crossref","unstructured":"Pudil P, Novovicova J (1998) Novel methods for feature subset selection with respect to problem knowledge. In: Liu H, Motoda H (eds) Feature extraction, construction and selection. Springer, New York, pp 101\u2013116","DOI":"10.1007\/978-1-4615-5725-8_7"},{"key":"9593_CR37","unstructured":"Rennie J, Shih L, Teevan J, Karger D (2003) Tackling the poor assumptions of naive bayes classifiers. In: Proceedings of the 20th international conference on machine learning (ICML-2003), vol 20, pp 616\u2013624, Washington, DC"},{"issue":"5","key":"9593_CR38","doi-asserted-by":"crossref","first-page":"513","DOI":"10.1016\/0306-4573(88)90021-0","volume":"24","author":"G Salton","year":"1988","unstructured":"Salton G, Buckley C (1988) Term-weighing approaches in automatic text retrieval. Inf Process Manag 24(5):513\u2013523","journal-title":"Inf Process Manag"},{"key":"9593_CR39","doi-asserted-by":"crossref","first-page":"538","DOI":"10.1002\/asi.21001","volume":"60","author":"E Stamatatos","year":"2009","unstructured":"Stamatatos E (2009) A survey of modern authorship attribution methods. J Am Soc Inf Sci Technol 60:538\u2013556","journal-title":"J Am Soc Inf Sci Technol"},{"issue":"1","key":"9593_CR40","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1326561.1326564","volume":"2","author":"T Urvoy","year":"2008","unstructured":"Urvoy T, Chauveau E, Filoche P, Lavergne T (2008) Tracking web spam with html style similarities. ACM Trans Web 2(1):1\u201328","journal-title":"ACM Trans Web"},{"issue":"10","key":"9593_CR41","doi-asserted-by":"crossref","first-page":"1532","DOI":"10.1109\/TNN.2011.2161999","volume":"22","author":"H Zhang","year":"2011","unstructured":"Zhang H, Liu G, Chow TWS, Liu W (2011) Textual and visual content-based anti-phishing: a bayesian approach. IEEE Trans Neural Netw 22(10):1532\u20131546","journal-title":"IEEE Trans Neural Netw"}],"container-title":["Neural Processing Letters"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11063-017-9593-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11063-017-9593-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11063-017-9593-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,22]],"date-time":"2023-08-22T03:38:18Z","timestamp":1692675498000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11063-017-9593-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,2,7]]},"references-count":41,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2017,10]]}},"alternative-id":["9593"],"URL":"https:\/\/doi.org\/10.1007\/s11063-017-9593-7","relation":{},"ISSN":["1370-4621","1573-773X"],"issn-type":[{"type":"print","value":"1370-4621"},{"type":"electronic","value":"1573-773X"}],"subject":[],"published":{"date-parts":[[2017,2,7]]}}}