{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,19]],"date-time":"2026-02-19T07:16:56Z","timestamp":1771485416469,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","license":[{"start":{"date-parts":[[2013,2,18]],"date-time":"2013-02-18T00:00:00Z","timestamp":1361145600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2013,2,18]]},"DOI":"10.1145\/2435349.2435366","type":"proceedings-article","created":{"date-parts":[[2013,2,19]],"date-time":"2013-02-19T14:32:38Z","timestamp":1361284358000},"page":"141-152","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":67,"title":["Cross-layer detection of malicious websites"],"prefix":"10.1145","author":[{"given":"Li","family":"Xu","sequence":"first","affiliation":[{"name":"UT San Antonio, San Antonio, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhenxin","family":"Zhan","sequence":"additional","affiliation":[{"name":"UT San Antonio, San Antonio, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shouhuai","family":"Xu","sequence":"additional","affiliation":[{"name":"UT San Antonio, San Antonio, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Keying","family":"Ye","sequence":"additional","affiliation":[{"name":"UT San Antonio, San Antonio, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2013,2,18]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"AIRWeb'05","author":"Benczur A. A.","year":"2005","unstructured":"A. A. Benczur , K. Csalogany , T. Sarlos , and M. Uher . SpamRank - fully automatic link spam detection . In AIRWeb'05 , 2005 . A. A. Benczur, K. Csalogany, T. Sarlos, and M. Uher. SpamRank - fully automatic link spam detection. In AIRWeb'05, 2005."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963436"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/1966913.1966938"},{"key":"e_1_3_2_1_4_1","first-page":"11","volume-title":"WebApps'11","author":"Choi H.","year":"2011","unstructured":"H. Choi , B. B. Zhu , and H. Lee . Detecting malicious web links and identifying their attack types . In WebApps'11 , pages 11 -- 11 , 2011 . H. Choi, B. B. Zhu, and H. Lee. Detecting malicious web links and identifying their attack types. In WebApps'11, pages 11--11, 2011."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1022627411411"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1772690.1772720"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.5555\/129837"},{"key":"e_1_3_2_1_8_1","volume-title":"USENIX Security","author":"Curtsinger C.","year":"2011","unstructured":"C. Curtsinger , B. Livshits , B. Zorn , and C. Seifert . ZOZZLE: Fast and precise in-browser javascript malware detection . In USENIX Security , 2011 . C. Curtsinger, B. Livshits, B. Zorn, and C. Seifert. ZOZZLE: Fast and precise in-browser javascript malware detection. In USENIX Security, 2011."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1774088.1774482"},{"key":"e_1_3_2_1_10_1","volume-title":"Black Hat'07","author":"Feinstein B.","year":"2007","unstructured":"B. Feinstein and D. Peck . Caffeine Monkey: Automated collection, detection and analysis of malicious javascript . In Black Hat'07 , 2007 . B. Feinstein and D. Peck. Caffeine Monkey: Automated collection, detection and analysis of malicious javascript. In Black Hat'07, 2007."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1314389.1314391"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1656274.1656278"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2009.05.023"},{"key":"e_1_3_2_1_15_1","unstructured":"Google Safe Browsing API. url http:\/\/goo.gl\/tsXz2.  Google Safe Browsing API. url http:\/\/goo.gl\/tsXz2."},{"key":"e_1_3_2_1_16_1","unstructured":"The Ultimate Deobfuscator. url http:\/\/goo.gl\/KVM8w.  The Ultimate Deobfuscator. url http:\/\/goo.gl\/KVM8w."},{"key":"e_1_3_2_1_17_1","unstructured":"Capture - Honeypot Client (Capture-HPC). urlhttp:\/\/goo.gl\/u7qJZ.  Capture - Honeypot Client (Capture-HPC). urlhttp:\/\/goo.gl\/u7qJZ."},{"key":"e_1_3_2_1_18_1","unstructured":"Know your enemy: Malicious web servers. url http:\/\/goo.gl\/tfxQl.  Know your enemy: Malicious web servers. url http:\/\/goo.gl\/tfxQl."},{"key":"e_1_3_2_1_19_1","unstructured":"Know your enemy: Behind the scenes of malicious web servers. url http:\/\/goo.gl\/MNfTY.  Know your enemy: Behind the scenes of malicious web servers. url http:\/\/goo.gl\/MNfTY."},{"key":"e_1_3_2_1_20_1","unstructured":"netfilter - iptables. url http:\/\/goo.gl\/bfh6F.  netfilter - iptables. url http:\/\/goo.gl\/bfh6F."},{"key":"e_1_3_2_1_21_1","unstructured":"McAfee SiteAdvisor}. url http:\/\/goo.gl\/cfjC.  McAfee SiteAdvisor}. url http:\/\/goo.gl\/cfjC."},{"key":"e_1_3_2_1_22_1","unstructured":"Tcpdump 80 & libcap. url http:\/\/goo.gl\/wt2W.  Tcpdump 80 & libcap. url http:\/\/goo.gl\/wt2W."},{"key":"e_1_3_2_1_23_1","first-page":"338","volume-title":"Estimating continuous distributions in Bayesian classifiers. UAI}","author":"John G. H.","year":"1995","unstructured":"G. H. John and P. Langley . Estimating continuous distributions in Bayesian classifiers. UAI} , pages 338 -- 345 , 1995 . G. H. John and P. Langley. Estimating continuous distributions in Bayesian classifiers. UAI}, pages 338--345, 1995."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.5555\/2026647.2026658"},{"key":"e_1_3_2_1_25_1","first-page":"191","volume-title":"Applied Statistics","author":"le Cessie S.","year":"1992","unstructured":"S. le Cessie and J. van Houwelingen . Ridge estimators in logistic regression . Applied Statistics , pages 191 -- 201 , 1992 . S. le Cessie and J. van Houwelingen. Ridge estimators in logistic regression. Applied Statistics, pages 191--201, 1992."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557153"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1553374.1553462"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23644-0_15"},{"key":"e_1_3_2_1_29_1","volume-title":"LEET'09","author":"Nazario J.","year":"2009","unstructured":"J. Nazario . PhoneyC : a virtual client honeypot . In LEET'09 , 2009 . J. Nazario. PhoneyC: a virtual client honeypot. In LEET'09, 2009."},{"key":"e_1_3_2_1_30_1","volume-title":"NDSS'07","author":"Niu Y.","year":"2007","unstructured":"Y. Niu , Y. min Wang , H. Chen , M. Ma , and F. Hsu . A quantitative study of forum spamming using contextbased analysis . In NDSS'07 , 2007 . Y. Niu, Y. min Wang, H. Chen, M. Ma, and F. Hsu. A quantitative study of forum spamming using contextbased analysis. In NDSS'07, 2007."},{"key":"e_1_3_2_1_31_1","unstructured":"W. Palant. JavaScript Deobfuscator. url http:\/\/goo.gl\/u80Va.  W. Palant. JavaScript Deobfuscator. url http:\/\/goo.gl\/u80Va."},{"key":"e_1_3_2_1_32_1","first-page":"185","volume-title":"Advances in Kernel Methods","author":"Platt J. C.","year":"1999","unstructured":"J. C. Platt . Fast training of support vector machines using sequential minimal optimization. In Advances in Kernel Methods , pages 185 -- 208 . MIT Press , 1999 . J. C. Platt. Fast training of support vector machines using sequential minimal optimization. In Advances in Kernel Methods, pages 185--208. MIT Press, 1999."},{"key":"e_1_3_2_1_33_1","volume-title":"USENIX Security","author":"Provos N.","year":"2008","unstructured":"N. Provos , P. Mavrommatis , M. A. Rajab , and F. Monrose . All your iframes point to us . In USENIX Security , 2008 . N. Provos, P. Mavrommatis, M. A. Rajab, and F. Monrose. All your iframes point to us. In USENIX Security, 2008."},{"key":"e_1_3_2_1_34_1","volume-title":"NDSS'10","author":"Qian Z.","year":"2010","unstructured":"Z. Qian , Z. M. Mao , Y. Xie , and F. Yu . On network-level clusters for spam detection . In NDSS'10 , 2010 . Z. Qian, Z. M. Mao, Y. Xie, and F. Yu. On network-level clusters for spam detection. In NDSS'10, 2010."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.5555\/152181"},{"key":"e_1_3_2_1_36_1","volume-title":"Google","author":"Rajab M.","year":"2011","unstructured":"M. Rajab , L. Ballard , N. Jagpal , P. Mavrommatis , D. Nojiri , N. Provos , and L. Schmidt . Trends in circumventing web-malware detection. Technical report , Google , 2011 . M. Rajab, L. Ballard, N. Jagpal, P. Mavrommatis, D. Nojiri, N. Provos, and L. Schmidt. Trends in circumventing web-malware detection. Technical report, Google, 2011."},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/1920261.1920267"},{"key":"e_1_3_2_1_38_1","unstructured":"Sophos Corporation. Security Threat Report Update 07\/2008. url http:\/\/goo.gl\/pg8HE.  Sophos Corporation. Security Threat Report Update 07\/2008. url http:\/\/goo.gl\/pg8HE."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.25"},{"key":"e_1_3_2_1_40_1","volume-title":"NDSS'06","author":"Wang Y.-M.","year":"2006","unstructured":"Y.-M. Wang , D. Beck , X. Jiang , and R. Roussev . Automated web patrol with strider honeymonkeys: Finding web sites that exploit browser vulnerabilities . In NDSS'06 , 2006 . Y.-M. Wang, D. Beck, X. Jiang, and R. Roussev. Automated web patrol with strider honeymonkeys: Finding web sites that exploit browser vulnerabilities. In NDSS'06, 2006."},{"key":"e_1_3_2_1_41_1","volume-title":"NDSS'10","author":"Whittaker C.","year":"2010","unstructured":"C. Whittaker , B. Ryner , and M. Nazif . Large-scale automatic classification of phishing pages . In NDSS'10 , 2010 . C. Whittaker, B. Ryner, and M. Nazif. Large-scale automatic classification of phishing pages. In NDSS'10, 2010."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963435"}],"event":{"name":"CODASPY'13: Third ACM Conference on Data and Application Security and Privacy","location":"San Antonio Texas USA","acronym":"CODASPY'13","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the third ACM conference on Data and application security and privacy"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2435349.2435366","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2435349.2435366","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T08:18:57Z","timestamp":1750234737000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2435349.2435366"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,2,18]]},"references-count":41,"alternative-id":["10.1145\/2435349.2435366","10.1145\/2435349"],"URL":"https:\/\/doi.org\/10.1145\/2435349.2435366","relation":{},"subject":[],"published":{"date-parts":[[2013,2,18]]},"assertion":[{"value":"2013-02-18","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}