{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,23]],"date-time":"2026-10-23T20:29:11Z","timestamp":1792787351807,"version":"4.5.0"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,11,1]],"date-time":"2017-11-01T00:00:00Z","timestamp":1509494400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"UCSD Center for Networked Systems"},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["NSF-1237264"],"award-info":[{"award-number":["NSF-1237264"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,11]]},"DOI":"10.1145\/3131365.3131391","type":"proceedings-article","created":{"date-parts":[[2017,11,14]],"date-time":"2017-11-14T09:40:22Z","timestamp":1510652422000},"page":"341-354","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":22,"title":["Tripwire"],"prefix":"10.1145","author":[{"given":"Joe","family":"DeBlasio","sequence":"first","affiliation":[{"name":"UC San Diego"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stefan","family":"Savage","sequence":"additional","affiliation":[{"name":"UC San Diego"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Geoffrey M.","family":"Voelker","sequence":"additional","affiliation":[{"name":"UC San Diego"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alex C.","family":"Snoeren","sequence":"additional","affiliation":[{"name":"UC San Diego"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2017,11]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Alexa Top 500 global sites. http:\/\/www.alexa.com\/topsites.  Alexa Top 500 global sites. http:\/\/www.alexa.com\/topsites."},{"key":"e_1_3_2_1_2_1","unstructured":"CA Civil Code Section 1798.80-1798.84. http:\/\/www.leginfo.ca.gov\/cgi-bin\/displaycode?section=civ&group=01001-02000&file=1798.80-1798.84.  CA Civil Code Section 1798.80-1798.84. http:\/\/www.leginfo.ca.gov\/cgi-bin\/displaycode?section=civ&group=01001-02000&file=1798.80-1798.84."},{"key":"e_1_3_2_1_3_1","unstructured":"Carbonite Accounts Targeted In Password Reuse Attack. https:\/\/www.carbonite.com\/en\/cloud-backup\/business\/resources\/carbonite-blog\/carbonite-password-attack\/.  Carbonite Accounts Targeted In Password Reuse Attack. https:\/\/www.carbonite.com\/en\/cloud-backup\/business\/resources\/carbonite-blog\/carbonite-password-attack\/."},{"key":"e_1_3_2_1_4_1","unstructured":"Cluster of 'megabreaches' compromises a whopping 642 million passwords. http:\/\/arstechnica.com\/security\/2016\/05\/cluster-of-megabreaches-compromise-a-whopping-642--million-passwords\/.  Cluster of 'megabreaches' compromises a whopping 642 million passwords. http:\/\/arstechnica.com\/security\/2016\/05\/cluster-of-megabreaches-compromise-a-whopping-642--million-passwords\/."},{"key":"e_1_3_2_1_5_1","unstructured":"DeCaptcher --- CAPTCHA solving service math CAPTCHA bypass hard CAPTCHA recognition. http:\/\/de-captcher.com.  DeCaptcher --- CAPTCHA solving service math CAPTCHA bypass hard CAPTCHA recognition. http:\/\/de-captcher.com."},{"key":"e_1_3_2_1_6_1","unstructured":"Defending Against Hackers Took a Back Seat at Yahoo Insiders Say. http:\/\/www.nytimes.com\/2016\/09\/29\/technology\/yahoo-data-breach-hacking.html.  Defending Against Hackers Took a Back Seat at Yahoo Insiders Say. http:\/\/www.nytimes.com\/2016\/09\/29\/technology\/yahoo-data-breach-hacking.html."},{"key":"e_1_3_2_1_7_1","unstructured":"Fake Name Generator. http:\/\/fakenamegenerator.com.  Fake Name Generator. http:\/\/fakenamegenerator.com."},{"key":"e_1_3_2_1_8_1","unstructured":"GitHub Security Update: Reused password attack. https:\/\/github.com\/blog\/2190-github-security-update-reused-password-attack.  GitHub Security Update: Reused password attack. https:\/\/github.com\/blog\/2190-github-security-update-reused-password-attack."},{"key":"e_1_3_2_1_9_1","unstructured":"GoToMyPC Password Issues: Incident Report for GoToMyPC System Status. http:\/\/status.gotomypc.com\/incidents\/s2k8h1xhzn4k.  GoToMyPC Password Issues: Incident Report for GoToMyPC System Status. http:\/\/status.gotomypc.com\/incidents\/s2k8h1xhzn4k."},{"key":"e_1_3_2_1_10_1","unstructured":"Hackers selling 117 million LinkedIn passwords. http:\/\/money.cnn.com\/2016\/05\/19\/technology\/linkedin-hack\/.  Hackers selling 117 million LinkedIn passwords. http:\/\/money.cnn.com\/2016\/05\/19\/technology\/linkedin-hack\/."},{"key":"e_1_3_2_1_11_1","unstructured":"Have I Been Pwned --- Pwned Websites. https:\/\/haveibeenpwned.com\/PwnedWebsites.  Have I Been Pwned --- Pwned Websites. https:\/\/haveibeenpwned.com\/PwnedWebsites."},{"key":"e_1_3_2_1_12_1","unstructured":"{INFOGRAPHIC} Online Overload --- It's Worse Than You Thought. https:\/\/blog.dashlane.com\/infographic-online-overload-its-worse-than-you-thought\/.  {INFOGRAPHIC} Online Overload --- It's Worse Than You Thought. https:\/\/blog.dashlane.com\/infographic-online-overload-its-worse-than-you-thought\/."},{"key":"e_1_3_2_1_13_1","unstructured":"KeyCAPTCHA --- Innovative Anti-Spam Solution. https:\/\/www.keycaptcha.com\/.  KeyCAPTCHA --- Innovative Anti-Spam Solution. https:\/\/www.keycaptcha.com\/."},{"key":"e_1_3_2_1_14_1","unstructured":"No Simple Fix for Password Reuse. https:\/\/threatpost.com\/no-simple-fix-for-password-reuse\/118536\/.  No Simple Fix for Password Reuse. https:\/\/threatpost.com\/no-simple-fix-for-password-reuse\/118536\/."},{"key":"e_1_3_2_1_15_1","unstructured":"No wonder hackers have it easy: Most of us now have 26 different online accounts - but only five passwords. http:\/\/www.dailymail.co.uk\/sciencetech\/article-2174274\/No-wonder-hackers-easy-Most-26-different-online-accounts-passwords.html.  No wonder hackers have it easy: Most of us now have 26 different online accounts - but only five passwords. http:\/\/www.dailymail.co.uk\/sciencetech\/article-2174274\/No-wonder-hackers-easy-Most-26-different-online-accounts-passwords.html."},{"key":"e_1_3_2_1_16_1","unstructured":"NSA disguised itself as Google to spy say reports. https:\/\/www.cnet.com\/news\/nsa-disguised-itself-as-google-to-spy-say-reports\/.  NSA disguised itself as Google to spy say reports. https:\/\/www.cnet.com\/news\/nsa-disguised-itself-as-google-to-spy-say-reports\/."},{"key":"e_1_3_2_1_17_1","unstructured":"Online passwords: keep it complicated. https:\/\/www.theguardian.com\/technology\/2012\/oct\/05\/online-security-passwords-tricks-hacking.  Online passwords: keep it complicated. https:\/\/www.theguardian.com\/technology\/2012\/oct\/05\/online-security-passwords-tricks-hacking."},{"key":"e_1_3_2_1_18_1","unstructured":"Quantcast --- Top Ranking International Websites. https:\/\/www.quantcast.com\/top-sites.  Quantcast --- Top Ranking International Websites. https:\/\/www.quantcast.com\/top-sites."},{"key":"e_1_3_2_1_19_1","unstructured":"reCAPTCHA: Easy on Humans Hard on Bots. https:\/\/www.google.com\/recaptcha.  reCAPTCHA: Easy on Humans Hard on Bots. https:\/\/www.google.com\/recaptcha."},{"key":"e_1_3_2_1_20_1","unstructured":"WebKit. http:\/\/webkit.org.  WebKit. http:\/\/webkit.org."},{"key":"e_1_3_2_1_21_1","unstructured":"Yahoo Says Hackers Stole Data on 500 Million Users in 2014. http:\/\/www.nytimes.com\/2016\/09\/23\/technology\/yahoo-hackers.html.  Yahoo Says Hackers Stole Data on 500 Million Users in 2014. http:\/\/www.nytimes.com\/2016\/09\/23\/technology\/yahoo-hackers.html."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-70542-0_2"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24852-1_21"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/2488388.2488405"},{"key":"e_1_3_2_1_25_1","volume-title":"Proc. Winter USENIX Conference","author":"Cheswick B.","year":"1992","unstructured":"B. Cheswick . An Evening with Berferd . In Proc. Winter USENIX Conference , San Francisco, pages 20--24 , 1992 . B. Cheswick. An Evening with Berferd. In Proc. Winter USENIX Conference, San Francisco, pages 20--24, 1992."},{"key":"e_1_3_2_1_26_1","volume-title":"June","author":"Coleman L.","year":"2016","unstructured":"L. Coleman . Hacked BitcoinTalk .org User Data Goes Up For Sale On Dark Web . https:\/\/www.cryptocoinsnews.com\/hacked-bitcointalk-org-user-data-goes-up-for-sale-on-dark-web\/ , June 2016 . L. Coleman. Hacked BitcoinTalk.org User Data Goes Up For Sale On Dark Web. https:\/\/www.cryptocoinsnews.com\/hacked-bitcointalk-org-user-data-goes-up-for-sale-on-dark-web\/, June 2016."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23357"},{"key":"e_1_3_2_1_28_1","first-page":"523","volume-title":"Proc. of the 21st USENIX Security Symposium","author":"Doup\u00e9 A.","year":"2012","unstructured":"A. Doup\u00e9 , L. Cavedon , C. Kruegel , and G. Vigna . Enemy of the State: A State-Aware Black-Box Web Vulnerability Scanner . In Proc. of the 21st USENIX Security Symposium , pages 523 -- 538 , 2012 . A. Doup\u00e9, L. Cavedon, C. Kruegel, and G. Vigna. Enemy of the State: A State-Aware Black-Box Web Vulnerability Scanner. In Proc. of the 21st USENIX Security Symposium, pages 523--538, 2012."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242661"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.45"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1143120.1143127"},{"key":"e_1_3_2_1_32_1","first-page":"681","volume-title":"Proceedings of the 23rd International Information Security Conference","author":"Herley C.","year":"2008","unstructured":"C. Herley and D. Flor\u011bncio . Protecting Financial Institutions from Brute-Force Attacks. In S. Jajodia, P. Samarati, and S. Cimato, editors , Proceedings of the 23rd International Information Security Conference , pages 681 -- 685 , 2008 . C. Herley and D. Flor\u011bncio. Protecting Financial Institutions from Brute-Force Attacks. In S. Jajodia, P. Samarati, and S. Cimato, editors, Proceedings of the 23rd International Information Security Conference, pages 681--685, 2008."},{"key":"e_1_3_2_1_33_1","unstructured":"A. Hidayat. PhantomJS. http:\/\/phantomjs.org.  A. Hidayat. PhantomJS. http:\/\/phantomjs.org."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/975817.975820"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516671"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1135777.1135817"},{"key":"e_1_3_2_1_37_1","first-page":"3","volume-title":"USENIX Security Symposium","volume":"10","author":"Motoyama M.","year":"2010","unstructured":"M. Motoyama , K. Levchenko , C. Kanich , D. McCoy , G. M. Voelker , and S. Savage . Re: Captchas-understanding captcha-solving services in an economic context . In USENIX Security Symposium , volume 10 , page 3 , 2010 . M. Motoyama, K. Levchenko, C. Kanich, D. McCoy, G. M. Voelker, and S. Savage. Re: Captchas-understanding captcha-solving services in an economic context. In USENIX Security Symposium, volume 10, page 3, 2010."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/2987443.2987475"},{"key":"e_1_3_2_1_39_1","unstructured":"N. Perlroth and D. Gelles. Russian Hackers Amass Over a Billion Internet Passwords. http:\/\/www.nytimes.com\/2014\/08\/06\/technology\/russian-gang-said-to-amass-more-than-a-billion-stolen-internet-credentials.html August 2014.  N. Perlroth and D. Gelles. Russian Hackers Amass Over a Billion Internet Passwords. http:\/\/www.nytimes.com\/2014\/08\/06\/technology\/russian-gang-said-to-amass-more-than-a-billion-stolen-internet-credentials.html August 2014."},{"key":"e_1_3_2_1_40_1","first-page":"625","volume-title":"Automatically Detecting Vulnerable Websites Before They Turn Malicious. In 23rd USENIX Security Symposium","author":"Soska K.","year":"2014","unstructured":"K. Soska and N. Christin . Automatically Detecting Vulnerable Websites Before They Turn Malicious. In 23rd USENIX Security Symposium , pages 625 -- 640 , Aug. 2014 . K. Soska and N. Christin. Automatically Detecting Vulnerable Websites Before They Turn Malicious. In 23rd USENIX Security Symposium, pages 625--640, Aug. 2014."},{"key":"e_1_3_2_1_41_1","volume-title":"Workshop on the Economics of Information Security","author":"Thomas K.","year":"2015","unstructured":"K. Thomas , D. Huang , D. Wang , E. Bursztein , C. Grier , T. J. Holt , C. Kruegel , D. McCoy , S. Savage , and G. Vigna . Framing Dependencies Introduced by Underground Commoditization . In Workshop on the Economics of Information Security , 2015 . K. Thomas, D. Huang, D. Wang, E. Bursztein, C. Grier, T. J. Holt, C. Kruegel, D. McCoy, S. Savage, and G. Vigna. Framing Dependencies Introduced by Underground Commoditization. In Workshop on the Economics of Information Security, 2015."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-45472-5_22"}],"event":{"name":"IMC '17: Internet Measurement Conference","location":"London United Kingdom","acronym":"IMC '17","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication","USENIX Assoc USENIX Assoc"]},"container-title":["Proceedings of the 2017 Internet Measurement Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3131365.3131391","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3131365.3131391","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3131365.3131391","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:13:40Z","timestamp":1750198420000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3131365.3131391"}},"subtitle":["inferring internet site compromise"],"short-title":[],"issued":{"date-parts":[[2017,11]]},"references-count":42,"alternative-id":["10.1145\/3131365.3131391","10.1145\/3131365"],"URL":"https:\/\/doi.org\/10.1145\/3131365.3131391","relation":{},"subject":[],"published":{"date-parts":[[2017,11]]},"assertion":[{"value":"2017-11-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}