{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T17:52:12Z","timestamp":1740160332156,"version":"3.37.3"},"reference-count":76,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2022,8,20]],"date-time":"2022-08-20T00:00:00Z","timestamp":1660953600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2022,8,20]],"date-time":"2022-08-20T00:00:00Z","timestamp":1660953600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100000269","name":"economic and social research council","doi-asserted-by":"crossref","award":["ES\/S008853\/1"],"award-info":[{"award-number":["ES\/S008853\/1"]}],"id":[{"id":"10.13039\/501100000269","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Soc. Netw. Anal. Min."],"published-print":{"date-parts":[[2022,12]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>This paper tests disruption strategies in Twitter networks containing malicious URLs used in drive-by download attacks. Cybercriminals use popular events that attract a large number of Twitter users to infect and propagate malware by using trending hashtags and creating misleading tweets to lure users to malicious webpages. Due to Twitter\u2019s 280 character restriction and automatic shortening of URLs, it is particularly susceptible to the propagation of malware involved in drive-by download attacks. Considering the number of online users and the network formed by retweeting a tweet, a cybercriminal can infect millions of users in a short period. Policymakers and researchers have struggled to develop an efficient network disruption strategy to stop malware propagation effectively. We define an efficient strategy as one that considers network topology and dependency on network resilience, where resilience is the ability of the network to continue to disseminate information even when users are removed from it. One of the challenges faced while curbing malware propagation on online social platforms is understanding the cybercriminal network spreading the malware. Combining computational modelling and social network analysis, we identify the most effective strategy for disrupting networks of malicious URLs. Our results emphasise the importance of specific network disruption parameters such as network and emotion features, which have proved to be more effective in disrupting malicious networks compared to random strategies. In conclusion, disruption strategies force cybercriminal networks to become more vulnerable by strategically removing malicious users, which causes successful network disruption to become a long-term effort.<\/jats:p>","DOI":"10.1007\/s13278-022-00944-2","type":"journal-article","created":{"date-parts":[[2022,8,20]],"date-time":"2022-08-20T04:02:32Z","timestamp":1660968152000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Disrupting drive-by download networks on Twitter"],"prefix":"10.1007","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9761-0945","authenticated-orcid":false,"given":"Amir","family":"Javed","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ruth","family":"Ikwu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pete","family":"Burnap","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Luca","family":"Giommoni","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Matthew L.","family":"Williams","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,8,20]]},"reference":[{"key":"944_CR1","unstructured":"Apr 06, PM, .a..: Unit 42 cloud threat report. https:\/\/www.paloaltonetworks.com\/prisma\/unit42-cloud-threat-research-2h21"},{"issue":"6","key":"944_CR2","doi-asserted-by":"publisher","first-page":"837","DOI":"10.2307\/2095954","volume":"58","author":"WE Baker","year":"1993","unstructured":"Baker WE, Faulkner RR (1993) The social organization of conspiracy: illegal networks in the heavy electrical equipment industry. Ame Sociol Rev 58(6):837. https:\/\/doi.org\/10.2307\/2095954","journal-title":"Ame Sociol Rev"},{"issue":"2","key":"944_CR3","doi-asserted-by":"publisher","first-page":"192","DOI":"10.1509\/jmr.10.0353","volume":"49","author":"J Berger","year":"2012","unstructured":"Berger J, Milkman KL (2012) What makes online content viral? J Mark Res 49(2):192\u2013205","journal-title":"J Mark Res"},{"issue":"1","key":"944_CR4","first-page":"18","volume":"5","author":"J Berger","year":"2013","unstructured":"Berger J, Milkman KL (2013) Emotion and virality: what makes online content go viral? GfK Mark Intell Rev 5(1):18\u201323","journal-title":"GfK Mark Intell Rev"},{"issue":"2\u20133","key":"944_CR5","doi-asserted-by":"publisher","first-page":"238","DOI":"10.1080\/17440572.2013.787927","volume":"14","author":"DA Bright","year":"2013","unstructured":"Bright DA, Delaney JJ (2013) Evolution of a drug trafficking network: mapping changes in network structure and function across time. Glob Crime 14(2\u20133):238\u2013260. https:\/\/doi.org\/10.1080\/17440572.2013.787927","journal-title":"Glob Crime"},{"issue":"3","key":"944_CR6","doi-asserted-by":"publisher","first-page":"262","DOI":"10.1177\/1043986214553378","volume":"31","author":"DA Bright","year":"2015","unstructured":"Bright DA, Greenhill C, Reynolds M, Ritter A, Morselli C (2015) The use of actor-level attributes and centrality measures to identify key actors: a case study of an australian drug trafficking network. J Contemp Crim Justice 31(3):262\u2013278","journal-title":"J Contemp Crim Justice"},{"key":"944_CR7","unstructured":"Bruns A (2011) When Obama gets Osama, the world turns to Twitter"},{"key":"944_CR8","doi-asserted-by":"crossref","unstructured":"Burnap P, Javed A, Rana OF, Awan MS (2015) Real-time classification of malicious urls on twitter using machine activity data. In: Advances in social networks analysis and mining (ASONAM), 2015 IEEE\/ACM international conference on, IEEE, pp 970\u2013977","DOI":"10.1145\/2808797.2809281"},{"issue":"1","key":"944_CR9","doi-asserted-by":"publisher","first-page":"206","DOI":"10.1007\/s13278-014-0206-4","volume":"4","author":"P Burnap","year":"2014","unstructured":"Burnap P, Williams ML, Sloan L, Rana O, Housley W, Edwards A, Knight V, Procter R, Voss A (2014) Tweeting the terror: modelling the social media reaction to the woolwich terrorist attack. Soc Netw Anal Min 4(1):206","journal-title":"Soc Netw Anal Min"},{"key":"944_CR10","unstructured":"Butts CT (2020) Tools for social network analysis [r package sna version 2.6]. https:\/\/cran.r-project.org\/web\/packages\/sna\/index.html"},{"key":"944_CR11","unstructured":"C.\u00a0Seifert RS (2017) Capture-hpc. https:\/\/projects.honeynet.org\/capture-hpc"},{"key":"944_CR12","doi-asserted-by":"crossref","unstructured":"Chen Y, Mao Y, Leng S, Wei Y, Chiang Y (2017) Malware propagation analysis in message-recallable online social networks. In: communication technology (ICCT), 2017 IEEE 17th International Conference on, IEEE, pp 1366\u20131371","DOI":"10.1109\/ICCT.2017.8359857"},{"issue":"1","key":"944_CR13","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1109\/LCOMM.2010.01.100830","volume":"15","author":"SM Cheng","year":"2011","unstructured":"Cheng SM, Ao WC, Chen PY, Chen KC (2011) On modeling malware propagation in generalized social networks. IEEE Commun Lett 15(1):25\u201327","journal-title":"IEEE Commun Lett"},{"key":"944_CR14","unstructured":"Corporation S (2019) 10 cyber security facts and statistics for 2018 . https:\/\/tinyurl.com\/d22tyv2k. [Online; accessed 17. May 2019]"},{"key":"944_CR16","unstructured":"Das K, Sinha S (2016) Centrality measure based approach for detection of malicious nodes in twitter social network. In: International conference on advanced material technologies"},{"key":"944_CR17","unstructured":"Duijn PAC, et\u00a0al. (2016) Detecting and disrupting criminal networks: a data driven approach. Universiteit van Amsterdam [Host]"},{"issue":"2","key":"944_CR18","doi-asserted-by":"publisher","first-page":"189","DOI":"10.1016\/j.physa.2010.09.034","volume":"390","author":"W Fan","year":"2011","unstructured":"Fan W, Yeung K (2011) Online social networks-paradise of computer viruses. Phys A 390(2):189\u2013197","journal-title":"Phys A"},{"key":"944_CR19","doi-asserted-by":"crossref","unstructured":"Fleizach C, Liljenstam M, Johansson P, Voelker GM, Mehes A (2007) Can you infect me now?: malware propagation in mobile phone networks. In: Proceedings of the 2007 ACM workshop on recurring malcode, ACM, pp 61\u201368","DOI":"10.1145\/1314389.1314402"},{"key":"944_CR21","doi-asserted-by":"crossref","unstructured":"Ganesh A, Massouli\u00e9 L, Towsley D (2005) The effect of network topology on the spread of epidemics. In: INFOCOM 2005. 24th annual joint conference of the IEEE computer and communications societies. Proceedings IEEE, vol.\u00a02, IEEE, pp 1455\u20131466","DOI":"10.1109\/INFCOM.2005.1498374"},{"key":"944_CR22","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781316212639","volume-title":"Illuminating dark networks: The study of clandestine groups and organizations","author":"LM Gerdes","year":"2015","unstructured":"Gerdes LM (2015) Illuminating dark networks: The study of clandestine groups and organizations. Cambridge University Press, UK"},{"key":"944_CR23","unstructured":"Ghosh S (2019) Top seven social media threats . https:\/\/www.computerweekly.com\/tip\/Top-seven-social-media-threats. [Online; accessed 23. May 2019]"},{"key":"944_CR24","doi-asserted-by":"crossref","unstructured":"Giommoni L, Berlusconi G, Aziani A (2021) Interdicting international drug trafficking: a network approach for coordinated and targeted interventions. Eur J Crim Policy Res 1\u201328","DOI":"10.1007\/s10610-020-09473-0"},{"key":"944_CR25","doi-asserted-by":"crossref","unstructured":"Giommoni L, Berlusconi G, Melendez-Torres G (2020) Characterising the structure of the largest online commercial sex network in the UK: observational study with implications for sti prevention. Cult Health Sex 1\u201318","DOI":"10.1080\/13691058.2020.1788725"},{"issue":"12","key":"944_CR26","doi-asserted-by":"publisher","first-page":"1608","DOI":"10.1080\/13691058.2020.1788725","volume":"23","author":"L Giommoni","year":"2021","unstructured":"Giommoni L, Berlusconi G, Melendez-Torres G (2021) Characterising the structure of the largest online commercial sex network in the UK: observational study with implications for sti prevention. Cult Health Sex 23(12):1608\u20131625","journal-title":"Cult Health Sex"},{"key":"944_CR27","unstructured":"Group N (2015) Introduction to anti-fuzzing: a defence in depth aid . https:\/\/www.nccgroup.trust\/uk\/about-us\/newsroom-and-events\/blogs\/2014\/january\/introduction-to-anti-fuzzing-a-defence-in-depth-aid"},{"key":"944_CR28","doi-asserted-by":"crossref","unstructured":"Horawalavithana S, Silva RD, Nabeel M, Elvitigala C, Wijesekara P, Iamnitchi A (2021) Malicious and low credibility urls on twitter during the astrazeneca covid-19 vaccine development. In: International conference on social computing, behavioral-cultural modeling and prediction and behavior representation in modeling and simulation, Springer, pp 3\u201312","DOI":"10.1007\/978-3-030-80387-2_1"},{"issue":"1","key":"944_CR29","first-page":"1","volume":"4","author":"CS Hsieh","year":"2014","unstructured":"Hsieh CS, Kov\u00e1\u0159\u00edk J, Logan T (2014) How central are clients in sexual networks created by commercial sex? Sci Rep 4(1):1\u20138","journal-title":"Sci Rep"},{"key":"944_CR30","doi-asserted-by":"crossref","unstructured":"Hu X, Tang J, Gao H, Liu H (2014) Social spammer detection with sentiment information. In: Data mining (ICDM), 2014 IEEE international conference on, IEEE, pp 180\u2013189","DOI":"10.1109\/ICDM.2014.141"},{"key":"944_CR31","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102218","volume":"104","author":"Y Huang","year":"2021","unstructured":"Huang Y, Li T, Zhang L, Li B, Liu X (2021) Jscontana: malicious javascript detection using adaptable context analysis and key feature extraction. Comput Secur 104:102218","journal-title":"Comput Secur"},{"key":"944_CR32","unstructured":"Interpol: Interpol report shows alarming rate of cyberattacks during covid-19. https:\/\/www.interpol.int\/en\/News-and-Events\/News\/2020\/INTERPOL-report-shows-alarming-rate-of-cyberattacks-during-COVID-19"},{"issue":"5","key":"944_CR33","doi-asserted-by":"publisher","first-page":"688","DOI":"10.2105\/AJPH.2019.304969","volume":"109","author":"AM Jamison","year":"2019","unstructured":"Jamison AM, Broniatowski DA, Quinn SC (2019) Malicious actors on twitter: a guide for public health researchers. Am J Public Health 109(5):688\u2013692","journal-title":"Am J Public Health"},{"key":"944_CR34","doi-asserted-by":"crossref","unstructured":"Jang Jw, Woo J, Mohaisen A, Yun J, Kim HK (2015) Mal-netminer: Malware classification approach based on social network analysis of system call graph. Math Probl Eng 2015","DOI":"10.1155\/2015\/769624"},{"key":"944_CR35","doi-asserted-by":"crossref","unstructured":"Javed A, Burnap P, Rana O (2018) Prediction of drive-by download attacks on twitter. Inf Process Manag","DOI":"10.1016\/j.ipm.2018.02.003"},{"key":"944_CR36","doi-asserted-by":"publisher","DOI":"10.1145\/3408894","author":"A Javed","year":"2020","unstructured":"Javed A, Burnap P, Williams ML, Rana OF (2020) Emotions behind drive-by download propagation on twitter. ACM Trans Web. https:\/\/doi.org\/10.1145\/3408894","journal-title":"ACM Trans Web"},{"key":"944_CR37","unstructured":"Jyothi S, Vorugunti CS, et\u00a0al. (2017) Epidemic model based evaluation of malware propagation in twitter. In: 2017 9th International conference on communication systems and networks (COMSNETS), IEEE, pp 407\u2013408"},{"key":"944_CR38","doi-asserted-by":"publisher","unstructured":"Keegan B, Ahmed MA, Williams D, Srivastava J, Contractor N (2010) Dark gold: Statistical properties of clandestine networks in massively multiplayer online games. Proceedings - SocialCom 2010: 2nd IEEE international conference on social computing, PASSAT 2010: 2nd IEEE international conference on privacy, security, risk and trust pp 201\u2013208 . https:\/\/doi.org\/10.1109\/SocialCom.2010.36","DOI":"10.1109\/SocialCom.2010.36"},{"key":"944_CR39","doi-asserted-by":"crossref","unstructured":"Khatua A, Khatua A (2017) Cricket world cup 2015: Predicting user\u2019s orientation through mix tweets on twitter platform. In: Proceedings of the 2017 IEEE\/ACM international conference on advances in social networks analysis and mining 2017, ACM, pp 948\u2013951","DOI":"10.1145\/3110025.3119398"},{"key":"944_CR40","doi-asserted-by":"crossref","unstructured":"Kim K, Kim IL, Kim CH, Kwon Y, Zheng Y, Zhang X, Xu D (2017) J-force: Forced execution on javascript. In: Proceedings of the 26th international conference on world wide web, pp 897\u2013906. International world wide web conferences steering committee","DOI":"10.1145\/3038912.3052674"},{"issue":"112","key":"944_CR41","first-page":"123","volume":"89","author":"D Krackhardt","year":"1994","unstructured":"Krackhardt D (1994) Graph theoretical dimensions of informal organizations. Comput organ Theory 89(112):123\u2013140","journal-title":"Comput organ Theory"},{"issue":"3","key":"944_CR42","doi-asserted-by":"publisher","first-page":"183","DOI":"10.1109\/TDSC.2013.3","volume":"10","author":"S Lee","year":"2013","unstructured":"Lee S, Kim J (2013) Warningbird: a near real-time detection system for suspicious urls in twitter stream. IEEE Trans Dependable Secure Comput 10(3):183\u2013195","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"944_CR15","unstructured":"Lunghi Daniel, Horejsi Jaromir, CP (2017) Untangling the patchwork cyberespionage group - trendlabs security intelligence blog . https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/untangling-the-patchwork-cyberespionage-group\/?_ga=2.58860772.876541134.1554288374-1666496361.1554288374. [Online; accessed 3. Apr. 2019]"},{"key":"944_CR43","first-page":"1","volume":"1","author":"B Liu","year":"2016","unstructured":"Liu B, Zhou W, Gao L, Zhou H, Luan TH, Wen S (2016) Malware propagations in wireless ad hoc networks. IEEE Trans Dependable Secure Comput 1:1\u20131","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"944_CR44","unstructured":"M A (2020) Here\u2019s who was behind the recent twitter hack, the worst cyber attack in the history of social media . https:\/\/tinyurl.com\/4mmtpd52"},{"key":"944_CR45","unstructured":"MarkMonitor: protecting brands in the digital world (2019). https:\/\/www.markmonitor.com. [Online; accessed 4. Mar. 2019]"},{"key":"944_CR46","unstructured":"Mohamed\u00a0Sikandar G (2018) 100 social media statistics you must know [2018]. Statusbrew Blog. https:\/\/blog.statusbrew.com\/social-media-statistics-2018-for-business"},{"issue":"3","key":"944_CR47","doi-asserted-by":"publisher","first-page":"436","DOI":"10.1111\/j.1467-8640.2012.00460.x","volume":"29","author":"SM Mohammad","year":"2013","unstructured":"Mohammad SM, Turney PD (2013) Crowdsourcing a word-emotion association lexicon. Comput Intell 29(3):436\u2013465","journal-title":"Comput Intell"},{"issue":"2","key":"944_CR48","doi-asserted-by":"publisher","first-page":"315","DOI":"10.1007\/s00477-016-1311-x","volume":"31","author":"A Moustakas","year":"2017","unstructured":"Moustakas A, Evans MR (2017) A big-data spatial, temporal and network analysis of bovine tuberculosis between wildlife (badgers) and cattle. Stoch Env Res Risk Assess 31(2):315\u2013328","journal-title":"Stoch Env Res Risk Assess"},{"issue":"1","key":"944_CR49","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1140\/epjds\/s13688-022-00323-z","volume":"11","author":"F Musciotto","year":"2022","unstructured":"Musciotto F, Miccich\u00e8 S (2022) Effective strategies for targeted attacks to the network of cosa nostra affiliates. EPJ Data Sci 11(1):11","journal-title":"EPJ Data Sci"},{"issue":"2","key":"944_CR50","doi-asserted-by":"publisher","first-page":"026126","DOI":"10.1103\/PhysRevE.67.026126","volume":"67","author":"ME Newman","year":"2003","unstructured":"Newman ME (2003) Mixing patterns in networks. Phys Rev E 67(2):026126","journal-title":"Phys Rev E"},{"issue":"1","key":"944_CR51","doi-asserted-by":"publisher","first-page":"237","DOI":"10.1017\/S1049096511000321","volume":"2","author":"A Perliger","year":"2011","unstructured":"Perliger A, Pedahzur A (2011) Responseto \u201csocial network analysis in the study of terrorism and political violence\u2019\u2019. PS Polit Sci Polit 2(1):237\u2013238. https:\/\/doi.org\/10.1017\/S1049096511000321","journal-title":"PS Polit Sci Polit"},{"key":"944_CR52","unstructured":"Puliga12 M, Caldarelli123 G, Chessa12 A, De R (2018) Understanding the twitter user networks of viruses and ransomware attacks"},{"key":"944_CR53","doi-asserted-by":"crossref","unstructured":"Puttaroo M, Komisarczuk P, de\u00a0Amorim RC (2014) Challenges in developing capture-hpc exclusion lists. In: Proceedings of the 7th international conference on security of information and networks, ACM, p 334","DOI":"10.1145\/2659651.2659717"},{"issue":"2","key":"944_CR54","doi-asserted-by":"publisher","first-page":"230","DOI":"10.1177\/0022427813483753","volume":"51","author":"AA Reid","year":"2014","unstructured":"Reid AA, Frank R, Iwanski N, Dabbaghian V, Brantingham P (2014) Uncovering the spatial patterning of crimes: a criminal movement model (crimm). J Res Crime Delinq 51(2):230\u2013255","journal-title":"J Res Crime Delinq"},{"issue":"13","key":"944_CR55","doi-asserted-by":"publisher","first-page":"5706","DOI":"10.1073\/pnas.0914080107","volume":"107","author":"LE Rocha","year":"2010","unstructured":"Rocha LE, Liljeros F, Holme P (2010) Information dynamics shape the sexual networks of internet-mediated prostitution. Proc Natl Acad Sci 107(13):5706\u20135711","journal-title":"Proc Natl Acad Sci"},{"key":"944_CR56","unstructured":"Roesslein J (2018) Tweepy. http:\/\/www.tweepy.org\/. (Accessed on 01\/07\/2018)"},{"key":"944_CR57","unstructured":"Rogers C (2016) Euro 2016 most tweeted TV of the year . https:\/\/www.marketingweek.com\/2016\/12\/14\/euros-tweeted-tv-2016. [Online; accessed 10. Dec. 2018]"},{"key":"944_CR58","doi-asserted-by":"crossref","unstructured":"Roy SS, Karanjit U, Nilizadeh S (2021) What remains uncaught?: Characterizing sparsely detected malicious urls on twitter","DOI":"10.14722\/madweb.2021.23028"},{"key":"944_CR59","unstructured":"Sabbagh D (2020) Covid-related cybercrime drives attacks on UK to record number . https:\/\/www.theguardian.com\/technology\/2020\/nov\/03\/covid-related-cybercrime-drives-attacks-on-uk-to-record-number"},{"key":"944_CR60","unstructured":"SANS Institue (2017): 2017 threat landscape survey: users on the front line. https:\/\/www.sans.org\/reading-room\/whitepapers\/threats\/2017-threat-landscape-survey-users-front-line-37910"},{"key":"944_CR61","doi-asserted-by":"publisher","first-page":"705","DOI":"10.1016\/j.procs.2012.06.090","volume":"10","author":"A Sanzgiri","year":"2012","unstructured":"Sanzgiri A, Joyce J, Upadhyaya S (2012) The early (tweet-ing) bird spreads the worm: an assessment of twitter for malware propagation. Procedia Comput Sci 10:705\u2013712","journal-title":"Procedia Comput Sci"},{"key":"944_CR62","unstructured":"Sevastopulo D, Dyer G (2015) Obama and xi in deal on cyber espionage. Financ Times 26"},{"key":"944_CR63","unstructured":"Smith K 60 incredible and interesting twitter stats and statistics. https:\/\/www.brandwatch.com\/blog\/twitter-stats-and-statistics\/#:~:text=Twitter usage statistics,That\u2019s 6,000 tweets every second"},{"key":"944_CR64","doi-asserted-by":"crossref","unstructured":"Sobhani P, Mohammad S, Kiritchenko S (2016) Detecting stance in tweets and analyzing its interaction with sentiment. In: Proceedings of the fifth joint conference on lexical and computational semantics, pp 159\u2013169","DOI":"10.18653\/v1\/S16-2021"},{"key":"944_CR65","unstructured":"Strapparava C, Valitutti A et\u00a0al. (2004) Wordnet affect: an affective extension of wordnet. In: Lrec, vol.\u00a04, Citeseer, pp 1083\u20131086"},{"issue":"04","key":"944_CR66","doi-asserted-by":"publisher","first-page":"P04009","DOI":"10.1088\/1742-5468\/2012\/04\/P04009","volume":"2012","author":"X Sun","year":"2012","unstructured":"Sun X, Liu YH, Li B, Li J, Han JW, Liu XJ (2012) Mathematical model for spreading dynamics of social network worms. J Stat Mech Theory Exp 2012(04):P04009","journal-title":"J Stat Mech Theory Exp"},{"issue":"6380","key":"944_CR67","doi-asserted-by":"publisher","first-page":"1146","DOI":"10.1126\/science.aap9559","volume":"359","author":"S Vosoughi","year":"2018","unstructured":"Vosoughi S, Roy D, Aral S (2018) The spread of true and false news online. Science 359(6380):1146\u20131151","journal-title":"Science"},{"key":"944_CR68","unstructured":"Wang B, Zubiaga A, Liakata M, Procter R (2015) Making the most of tweet-inherent features for social spam detection on twitter. arXiv preprint arXiv:1503.07405"},{"issue":"11","key":"944_CR69","doi-asserted-by":"publisher","first-page":"2558","DOI":"10.1109\/TIFS.2017.2711424","volume":"12","author":"T Wang","year":"2017","unstructured":"Wang T, Xia C, Li Z, Liu X, Xiang Y (2017) The spatial-temporal perspective: the study of the propagation of modern social worms. IEEE Trans Inf Forensics Secur 12(11):2558\u20132573","journal-title":"IEEE Trans Inf Forensics Secur"},{"issue":"10","key":"944_CR70","doi-asserted-by":"publisher","first-page":"2241","DOI":"10.1109\/TIFS.2016.2581305","volume":"11","author":"X Wang","year":"2016","unstructured":"Wang X, Ni W, Zheng K, Liu RP, Niu X (2016) Virus propagation modeling and convergence analysis in large-scale networks. IEEE Trans Inf Forensics Secur 11(10):2241\u20132254","journal-title":"IEEE Trans Inf Forensics Secur"},{"key":"944_CR71","doi-asserted-by":"crossref","unstructured":"Wasserman S, Faust K, et\u00a0al. (1994) Social network analysis: methods and applications","DOI":"10.1017\/CBO9780511815478"},{"issue":"4","key":"944_CR72","doi-asserted-by":"publisher","first-page":"361","DOI":"10.1109\/TDSC.2013.49","volume":"11","author":"S Wen","year":"2014","unstructured":"Wen S, Zhou W, Zhang J, Xiang Y, Zhou W, Jia W, Zou CC (2014) Modeling and analysis on the propagation dynamics of modern email malware. IEEE Trans Dependable Secure Comput 11(4):361\u2013374","journal-title":"IEEE Trans Dependable Secure Comput"},{"issue":"1","key":"944_CR73","first-page":"494","volume":"12","author":"A Willis","year":"2015","unstructured":"Willis A, Fisher A, Lvov I (2015) Mapping networks of influence: tracking Twitter conversations through time and space. J Audience Recept Stud 12(1):494\u2013530","journal-title":"J Audience Recept Stud"},{"issue":"10","key":"944_CR74","doi-asserted-by":"publisher","first-page":"58","DOI":"10.1145\/1400181.1400198","volume":"51","author":"J Xu","year":"2008","unstructured":"Xu J, Chen H (2008) The topology of dark networks. Commun ACM 51(10):58\u201365. https:\/\/doi.org\/10.1145\/1400181.1400198","journal-title":"Commun ACM"},{"key":"944_CR20","unstructured":"Yarochkin Fyodor, VK (2017) Lurk: retracing the group\u2019s five-year campaign - trendlabs security intelligence blog . https:\/\/blog.trendmicro.com\/trendlabs-security-intelligence\/lurk-retracing-five-year-campaign\/?_ga=2.58860772.876541134.1554288374-1666496361.1554288374. [Online; accessed 3. Apr. 2019]"},{"key":"944_CR75","doi-asserted-by":"crossref","unstructured":"Yan G, Chen G, Eidenbenz S, Li N (2011) Malware propagation in online social networks: nature, dynamics, and defense implications. In: Proceedings of the 6th ACM symposium on information, computer and communications security, ACM, pp 196\u2013206","DOI":"10.1145\/1966913.1966939"},{"key":"944_CR76","doi-asserted-by":"crossref","unstructured":"Zhang P, Oest A, Cho H, Sun Z, Johnson R, Wardman B, Sarker S, Kapravelos A, Bao T, Wang R et\u00a0al. (2021) Crawlphish: Large-scale analysis of client-side cloaking techniques in phishing. In: 2021 IEEE symposium on security and privacy (SP), IEEE, pp 1109\u20131124","DOI":"10.1109\/SP40001.2021.00021"}],"container-title":["Social Network Analysis and Mining"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s13278-022-00944-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s13278-022-00944-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s13278-022-00944-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,2]],"date-time":"2023-01-02T13:17:47Z","timestamp":1672665467000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s13278-022-00944-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,8,20]]},"references-count":76,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2022,12]]}},"alternative-id":["944"],"URL":"https:\/\/doi.org\/10.1007\/s13278-022-00944-2","relation":{},"ISSN":["1869-5450","1869-5469"],"issn-type":[{"type":"print","value":"1869-5450"},{"type":"electronic","value":"1869-5469"}],"subject":[],"published":{"date-parts":[[2022,8,20]]},"assertion":[{"value":"4 August 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"14 June 2022","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 June 2022","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 August 2022","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflicts of interest"}}],"article-number":"117"}}