{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,4]],"date-time":"2025-12-04T09:49:45Z","timestamp":1764841785457},"reference-count":31,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014,10]]},"DOI":"10.1109\/cns.2014.6997494","type":"proceedings-article","created":{"date-parts":[[2014,12,31]],"date-time":"2014-12-31T04:15:04Z","timestamp":1419999304000},"page":"265-273","source":"Crossref","is-referenced-by-count":36,"title":["An evasion and counter-evasion study in malicious websites detection"],"prefix":"10.1109","author":[{"given":"Li","family":"Xu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhenxin","family":"Zhan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shouhuai","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Keying","family":"Ye","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"19","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2006.165"},{"key":"17","article-title":"Voelker. Identifying suspicious urls: An application of large-scale online learning","author":"ma","year":"0","journal-title":"ICML'09"},{"key":"18","article-title":"Classifier evasion: Models and open problems","author":"nelson","year":"0","journal-title":"ECML PKDD'11"},{"key":"15","article-title":"On the effectiveness of techniques to detect phishing sites","author":"ludl","year":"0","journal-title":"DIM'07"},{"key":"16","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557153"},{"key":"13","article-title":"Chrome extensions: Threat analysis and countermeasures","author":"lei liu","year":"0","journal-title":"NDSS' 13"},{"key":"14","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382267"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.33"},{"key":"12","article-title":"Revolver: An automated approach to the detection of evasive web-based malware","author":"kapravelos","year":"2013","journal-title":"Usenix Security"},{"key":"21","article-title":"On network-level clusters for spam detection","author":"qian","year":"0","journal-title":"NDSS'10"},{"key":"20","article-title":"All your iframes point to us","author":"provos","year":"2008","journal-title":"Usenix Security"},{"journal-title":"C4 5 Programs for Machine Learning","year":"1993","author":"quinlan","key":"22"},{"key":"23","article-title":"Warningbird: Detecting suspicious urls in twitter stream","author":"sangho leey","year":"0","journal-title":"NDSS'10"},{"journal-title":"Capture-honeypot Client (Capture-hpc)","year":"2006","author":"seifert","key":"24"},{"key":"25","article-title":"The postman always rings twice: Attacking and defending postmessage in html5websites","author":"sooel son","year":"0","journal-title":"NDSS' 13"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.25"},{"key":"27","article-title":"Limits of learning-based signature generation with adversaries","author":"venkataraman","year":"0","journal-title":"NDSS'08"},{"key":"28","article-title":"Large-scale automatic classification of phishing pages","author":"whittaker","year":"0","journal-title":"NDSS'10"},{"key":"29","doi-asserted-by":"publisher","DOI":"10.1145\/2019599.2019606"},{"key":"3","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963436"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1109\/ATNAC.2008.4783302"},{"key":"10","doi-asserted-by":"publisher","DOI":"10.1145\/1314389.1314391"},{"key":"1","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435366"},{"key":"7","doi-asserted-by":"publisher","DOI":"10.1145\/1772690.1772720"},{"key":"6","first-page":"935","article-title":"Identification of malicious web pages through analysis of underlying dns and web server relationships","author":"christian seifert","year":"2008","journal-title":"LCN"},{"key":"5","article-title":"Detecting malicious web links and identifying their attack types","author":"choi","year":"0","journal-title":"WebApps'11"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963435"},{"key":"4","doi-asserted-by":"publisher","DOI":"10.1145\/1966913.1966938"},{"key":"9","first-page":"355","article-title":"Effective analysis, characterization, and detection of malicious web pages","author":"eshete","year":"0","journal-title":"12th WWW"},{"key":"8","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014066"}],"event":{"name":"2014 IEEE Conference on Communications and Network Security (CNS)","start":{"date-parts":[[2014,10,29]]},"location":"San Francisco, CA, USA","end":{"date-parts":[[2014,10,31]]}},"container-title":["2014 IEEE Conference on Communications and Network Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6982337\/6997445\/06997494.pdf?arnumber=6997494","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,10,14]],"date-time":"2020-10-14T14:32:10Z","timestamp":1602685930000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/6997494"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,10]]},"references-count":31,"URL":"https:\/\/doi.org\/10.1109\/cns.2014.6997494","relation":{},"subject":[],"published":{"date-parts":[[2014,10]]}}}