{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,6]],"date-time":"2026-04-06T00:03:06Z","timestamp":1775433786808,"version":"3.50.1"},"reference-count":48,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2014,12,1]],"date-time":"2014-12-01T00:00:00Z","timestamp":1417392000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"name":"Fonds National de la Recherche, Luxembourg","award":["3967419"],"award-info":[{"award-number":["3967419"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Serv. Manage."],"published-print":{"date-parts":[[2014,12]]},"DOI":"10.1109\/tnsm.2014.2377295","type":"journal-article","created":{"date-parts":[[2014,12,4]],"date-time":"2014-12-04T20:03:59Z","timestamp":1417723439000},"page":"458-471","source":"Crossref","is-referenced-by-count":204,"title":["PhishStorm: Detecting Phishing With Streaming Analytics"],"prefix":"10.1109","volume":"11","author":[{"given":"Samuel","family":"Marchal","sequence":"first","affiliation":[]},{"given":"Jerome","family":"Francois","sequence":"additional","affiliation":[]},{"given":"Radu","family":"State","sequence":"additional","affiliation":[]},{"given":"Thomas","family":"Engel","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SAI.2014.6918240"},{"key":"ref38","first-page":"107","article-title":"Highly predictive blacklisting","author":"zhang","year":"0","journal-title":"Proc 17th Conf Security Symp"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242659"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1145\/1526709.1526786"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/1460877.1460905"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/1754393.1754394"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557153"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2584679"},{"key":"ref35","first-page":"18","article-title":"Building a dynamic reputation system for DNS","author":"antonakakis","year":"0","journal-title":"Proc 19th USENIX Security Symposium"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/2584680"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/219717.219748"},{"key":"ref40","first-page":"1521","article-title":"Parsing and detecting phishing pages based on semantic understanding of text","volume":"9","author":"zhang","year":"2012","journal-title":"J Inf & Comput Sci"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/CNSM.2014.7014140"},{"key":"ref12","author":"mockapetris","year":"1987","journal-title":"RFC 1034 Domain Names—Concepts and Facilities"},{"key":"ref13","author":"mockapetris","year":"1987","journal-title":"RFC 1035 DOMAIN NAMES—Implementation and Specification"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/52324.52338"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1314389.1314391"},{"key":"ref16","author":"segaran","year":"2009","journal-title":"Beautiful Data The Stories behind Elegant Data Solutions"},{"key":"ref17","doi-asserted-by":"crossref","first-page":"190","DOI":"10.1007\/978-3-642-33338-5_10","article-title":"Proactive discovery of phishing related domain names","author":"marchal","year":"2012","journal-title":"Research in Attacks Intrusions and Defenses"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1037\/0033-295X.104.2.211"},{"key":"ref19","first-page":"491","article-title":"Mining the web for synonyms: PMI-IR versus LSA on TOEFL","author":"turney","year":"0","journal-title":"Proc 12th Eur Conf Mach Learn"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"ref4","year":"2014","journal-title":"Global Phishing Survey Trends and Domain Name Use"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/1656274.1656278"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/eCrime.2011.6151979"},{"key":"ref6","year":"2014","journal-title":"Phishing Activity Trends Report"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2012.2184552"},{"key":"ref5","year":"2008","journal-title":"SSAC advisory on fast flux hosting and DNS"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2007.48"},{"key":"ref7","first-page":"22","article-title":"Word association norms, mutual information, and lexicography","volume":"16","author":"church","year":"1990","journal-title":"Comput Linguistics"},{"key":"ref2","year":"2010","journal-title":"2010 Identity Fraud Survey Report"},{"key":"ref9","first-page":"33","article-title":"Disco: A multilingual database of distributionally similar words","author":"kolb","year":"0","journal-title":"Proceedings of KONVENS"},{"key":"ref1","year":"2007","journal-title":"Gartner survey shows phishing attacks escalated in 2007"},{"key":"ref46","first-page":"1","volume":"32","author":"rech","year":"2007","journal-title":"ACM SIGSOFT Softw Eng Notes"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/362686.362692"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2207243.2207252"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2382438.2382440"},{"key":"ref22","first-page":"422","article-title":"Lexical URL analysis for discriminating phishing and legitimate e-mail messages","author":"khonji","year":"0","journal-title":"Proc ICIT"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1038\/nature07634"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2007.80"},{"key":"ref42","first-page":"91","article-title":"Semantic based DNS forensics","author":"marchal","year":"0","journal-title":"Proc IEEE Int WIFS"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2011.5934995"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1186\/1687-417X-2012-1"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1553374.1553462"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557553"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/1882471.1882479"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36516-4_24"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2010.5462216"}],"container-title":["IEEE Transactions on Network and Service Management"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4275028\/6994315\/06975177.pdf?arnumber=6975177","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:27:33Z","timestamp":1642004853000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6975177\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,12]]},"references-count":48,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tnsm.2014.2377295","relation":{},"ISSN":["1932-4537"],"issn-type":[{"value":"1932-4537","type":"print"}],"subject":[],"published":{"date-parts":[[2014,12]]}}}