{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,30]],"date-time":"2026-03-30T14:08:54Z","timestamp":1774879734751,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":64,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,10,30]],"date-time":"2020-10-30T00:00:00Z","timestamp":1604016000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,10,30]]},"DOI":"10.1145\/3372297.3417257","type":"proceedings-article","created":{"date-parts":[[2020,11,2]],"date-time":"2020-11-02T18:27:04Z","timestamp":1604341624000},"page":"521-534","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":40,"title":["Lies in the Air: Characterizing Fake-base-station Spam Ecosystem in China"],"prefix":"10.1145","author":[{"given":"Yiming","family":"Zhang","sequence":"first","affiliation":[{"name":"Beijing National Research Center for Information Science and Technology & Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Baojun","family":"Liu","sequence":"additional","affiliation":[{"name":"Beijing National Research Center for Information Science and Technology & Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chaoyi","family":"Lu","sequence":"additional","affiliation":[{"name":"Beijing National Research Center for Information Science and Technology & Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhou","family":"Li","sequence":"additional","affiliation":[{"name":"University of California, Irvine, Irvine, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haixin","family":"Duan","sequence":"additional","affiliation":[{"name":"Beijing National Research Center for Information Science and Technology, Tsinghua University, & QI-ANXIN Group, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shuang","family":"Hao","sequence":"additional","affiliation":[{"name":"University of Texas at Dallas, Dallas, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mingxuan","family":"Liu","sequence":"additional","affiliation":[{"name":"Beijing National Research Center for Information Science and Technology & Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ying","family":"Liu","sequence":"additional","affiliation":[{"name":"Beijing National Research Center for Information Science and Technology & Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Dong","family":"Wang","sequence":"additional","affiliation":[{"name":"360 Mobile Safe, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qiang","family":"Li","sequence":"additional","affiliation":[{"name":"360 Mobile Safe, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,11,2]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"[n.d.]. Baidu short URL. https:\/\/dwz.cn.  [n.d.]. Baidu short URL. https:\/\/dwz.cn."},{"key":"e_1_3_2_2_2_1","unstructured":"[n.d.]. CatcherCatcher - Mobile Network Assessment Tools - SRLabs Open Source Projects. https:\/\/opensource.srlabs.de\/projects\/mobile-network-assessment-tools\/wiki\/CatcherCatcher.  [n.d.]. CatcherCatcher - Mobile Network Assessment Tools - SRLabs Open Source Projects. https:\/\/opensource.srlabs.de\/projects\/mobile-network-assessment-tools\/wiki\/CatcherCatcher."},{"key":"e_1_3_2_2_3_1","unstructured":"[n.d.]. Show API. https:\/\/www.showapi.com\/apiGateway\/view?apiCode=30.  [n.d.]. Show API. https:\/\/www.showapi.com\/apiGateway\/view?apiCode=30."},{"key":"e_1_3_2_2_4_1","unstructured":"[n.d.]. Sina short URL. https:\/\/open.weibo.com\/wiki.  [n.d.]. Sina short URL. https:\/\/open.weibo.com\/wiki."},{"key":"e_1_3_2_2_5_1","unstructured":"[n.d.]. Snoop Snitch SRLabs Open Source Projects. https:\/\/opensource.srlabs.de\/projects\/snoopsnitch.  [n.d.]. Snoop Snitch SRLabs Open Source Projects. https:\/\/opensource.srlabs.de\/projects\/snoopsnitch."},{"key":"e_1_3_2_2_6_1","unstructured":"[n.d.]. Web Service API. https:\/\/lbs.qq.com\/webservice_v1\/guide-gcoder.html.  [n.d.]. Web Service API. https:\/\/lbs.qq.com\/webservice_v1\/guide-gcoder.html."},{"key":"e_1_3_2_2_7_1","unstructured":"2014. 19 Fake Mobile Base Stations Found Across US. Are They For Spying or Crime? http:\/\/ibtimes.co.uk\/19-fake-mobile-base-stationsfound-across-us-are-they-spying-crime-1464008.  2014. 19 Fake Mobile Base Stations Found Across US. Are They For Spying or Crime? http:\/\/ibtimes.co.uk\/19-fake-mobile-base-stationsfound-across-us-are-they-spying-crime-1464008."},{"key":"e_1_3_2_2_8_1","unstructured":"2014. Are your calls being intercepted? 17 fake cell towers discovered in one month. http:\/\/computerworld.com\/article\/2600348\/mobile-security\/areyour-calls-being-intercepted-17-fake-cell-towers-discovered-in-onemonth.html.  2014. Are your calls being intercepted? 17 fake cell towers discovered in one month. http:\/\/computerworld.com\/article\/2600348\/mobile-security\/areyour-calls-being-intercepted-17-fake-cell-towers-discovered-in-onemonth.html."},{"key":"e_1_3_2_2_9_1","unstructured":"2014.Chinese cops nab 1 530 mobile SMS spammers in raid on fakebase. https:\/\/nakedsecurity.sophos.com\/2014\/03\/26\/chinese-cops-nab-1530-mobile-sms-spammers-in-raid-on-fake-base-stations\/.  2014.Chinese cops nab 1 530 mobile SMS spammers in raid on fakebase. https:\/\/nakedsecurity.sophos.com\/2014\/03\/26\/chinese-cops-nab-1530-mobile-sms-spammers-in-raid-on-fake-base-stations\/."},{"key":"e_1_3_2_2_10_1","unstructured":"2014. Phony cell towers are the next big security risk. http:\/\/www.theverge.com\/2014\/9\/18\/6394391\/phony-cell-towersare-the-next-big-security-risk.  2014. Phony cell towers are the next big security risk. http:\/\/www.theverge.com\/2014\/9\/18\/6394391\/phony-cell-towersare-the-next-big-security-risk."},{"key":"e_1_3_2_2_11_1","unstructured":"2014. Qihoo 360: Research reports of Fake Base Stations. http:\/\/www.ceocio.com.cn\/e\/action\/ShowInf o.php?classid=69&id=145193.  2014. Qihoo 360: Research reports of Fake Base Stations. http:\/\/www.ceocio.com.cn\/e\/action\/ShowInf o.php?classid=69&id=145193."},{"key":"e_1_3_2_2_12_1","unstructured":"2015. Fake Stingray mobile base stations discovered spying on millions of London-ers. http:\/\/www.ibtimes.co.uk\/fake-stingray-mobile-basestations-discovered-spying-millions-londoners-1505368.  2015. Fake Stingray mobile base stations discovered spying on millions of London-ers. http:\/\/www.ibtimes.co.uk\/fake-stingray-mobile-basestations-discovered-spying-millions-londoners-1505368."},{"key":"e_1_3_2_2_13_1","unstructured":"2016. Demystifying Fake Base Stations. http:\/\/business.sohu.com\/20160507\/n448197405.shtml.  2016. Demystifying Fake Base Stations. http:\/\/business.sohu.com\/20160507\/n448197405.shtml."},{"key":"e_1_3_2_2_14_1","unstructured":"2016. Demystifying the Industrial Chain of Fake Base Stations. http:\/\/m.sohu.com\/n\/444726367\/.  2016. Demystifying the Industrial Chain of Fake Base Stations. http:\/\/m.sohu.com\/n\/444726367\/."},{"key":"e_1_3_2_2_15_1","unstructured":"2016. Mobile Security Reports by Qihoo 360. http:\/\/zt.360.cn\/2015\/reportlist.html?list=1.  2016. Mobile Security Reports by Qihoo 360. http:\/\/zt.360.cn\/2015\/reportlist.html?list=1."},{"key":"e_1_3_2_2_16_1","unstructured":"2016. Research Reports: 2016 Fake Base Station of China. http:\/\/zt.360.cn\/1101061855.php?dtid=1101061451&did=1101741409.  2016. Research Reports: 2016 Fake Base Station of China. http:\/\/zt.360.cn\/1101061855.php?dtid=1101061451&did=1101741409."},{"key":"e_1_3_2_2_17_1","unstructured":"2016. Research Reports: 2016 Fake Base Station of China. https:\/\/m.qq.com\/security_lab\/news_detail_361.html.  2016. Research Reports: 2016 Fake Base Station of China. https:\/\/m.qq.com\/security_lab\/news_detail_361.html."},{"key":"e_1_3_2_2_18_1","unstructured":"2016. Underground economy of Fake Base Station. http:\/\/www.ceweekly.cn\/2016\/0919\/164561_4.shtml.  2016. Underground economy of Fake Base Station. http:\/\/www.ceweekly.cn\/2016\/0919\/164561_4.shtml."},{"key":"e_1_3_2_2_19_1","volume-title":"Chinese Internet Security Report for the first half of","year":"2017"},{"key":"e_1_3_2_2_20_1","unstructured":"2017. National Internet Finance Association of China. http:\/\/www.nifa.org.cn\/nifa\/2955675\/2955759\/2967869\/index.html.  2017. National Internet Finance Association of China. http:\/\/www.nifa.org.cn\/nifa\/2955675\/2955759\/2967869\/index.html."},{"key":"e_1_3_2_2_21_1","unstructured":"2018. How Spammers Conduct Mass Spam URL Attacks. https:\/\/www.datavisor.com\/blog\/how-spammers-conduct-mass-spam-url-attacks.  2018. How Spammers Conduct Mass Spam URL Attacks. https:\/\/www.datavisor.com\/blog\/how-spammers-conduct-mass-spam-url-attacks."},{"key":"e_1_3_2_2_22_1","unstructured":"2020. FBS SMS Dataset. https:\/\/github.com\/Cypher-Z\/FBS_SMS_Dataset.  2020. FBS SMS Dataset. https:\/\/github.com\/Cypher-Z\/FBS_SMS_Dataset."},{"key":"e_1_3_2_2_23_1","unstructured":"Qihoo 360. 2019. 360 Mobile Guard Official Website. https:\/\/shouji.360.cn.  Qihoo 360. 2019. 360 Mobile Guard Official Website. https:\/\/shouji.360.cn."},{"key":"e_1_3_2_2_24_1","unstructured":"Dare Abodunrin et al.2015. Detection and Mitigation methodology for Fake Base Stations Detection on 3G\/2G Cellular Networks. (2015).  Dare Abodunrin et al.2015. Detection and Mitigation methodology for Fake Base Stations Detection on 3G\/2G Cellular Networks. (2015)."},{"key":"e_1_3_2_2_25_1","volume-title":"An information-theoretic perspective of TF-IDF measures. Information Processing & Management39, 1","author":"Aizawa Akiko","year":"2003"},{"key":"e_1_3_2_2_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2034691.2034742"},{"key":"e_1_3_2_2_27_1","doi-asserted-by":"crossref","unstructured":"Eihal Alowaisheq Peng Wang Sumayah A Alrwais Xiaojing Liao XiaoFeng Wang Tasneem Alowaisheq Xianghang Mi Siyuan Tang and Baojun Liu. 2019.Cracking the Wall of Confinement: Understanding and Analyzing Malicious Domain Take-downs. In NDSS.  Eihal Alowaisheq Peng Wang Sumayah A Alrwais Xiaojing Liao XiaoFeng Wang Tasneem Alowaisheq Xianghang Mi Siyuan Tang and Baojun Liu. 2019.Cracking the Wall of Confinement: Understanding and Analyzing Malicious Domain Take-downs. In NDSS.","DOI":"10.14722\/ndss.2019.23243"},{"key":"e_1_3_2_2_28_1","unstructured":"Netlab at Qihoo 360. [n.d.]. Passive DNS System. http:\/\/www.passivedns.cn.  Netlab at Qihoo 360. [n.d.]. Passive DNS System. http:\/\/www.passivedns.cn."},{"key":"e_1_3_2_2_29_1","volume-title":"ECML PKDD Workshop: Languages for Data Mining and Machine Learning. 108--122","author":"Buitinck Lars","year":"2013"},{"key":"e_1_3_2_2_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/AICCSA.2009.5069374"},{"key":"e_1_3_2_2_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866310"},{"key":"e_1_3_2_2_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1321440.1321486"},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2664243.2664272"},{"key":"e_1_3_2_2_34_1","unstructured":"DDarko. [n.d.]. Python module\/library for retrieving WHOIS information of domains. https:\/\/github.com\/nri-pl\/python-whois.  DDarko. [n.d.]. Python module\/library for retrieving WHOIS information of domains. https:\/\/github.com\/nri-pl\/python-whois."},{"key":"e_1_3_2_2_35_1","unstructured":"FarSight-Security. [n.d.]. DNSDB data. https:\/\/www.farsightsecurity.com\/solutions\/dnsdb.  FarSight-Security. [n.d.]. DNSDB data. https:\/\/www.farsightsecurity.com\/solutions\/dnsdb."},{"key":"e_1_3_2_2_36_1","volume-title":"Proceedings of the10th ACM SIGCOMM conference on Internet measurement. ACM, 35--47","author":"Gao Hongyu"},{"key":"e_1_3_2_2_37_1","volume-title":"22nd USENIX Security Symposium (USENIX Security 13)","author":"Golde Nico","year":"2013"},{"key":"e_1_3_2_2_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/1166160.1166191"},{"key":"e_1_3_2_2_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866311"},{"key":"e_1_3_2_2_40_1","unstructured":"360\n    Mobile Guard. [n.d.]. Privacy Policy of 360 Mobile Guard. http:\/\/shouji.360.cn\/about\/privacy\/index_2.0.html.  360 Mobile Guard. [n.d.]. Privacy Policy of 360 Mobile Guard. http:\/\/shouji.360.cn\/about\/privacy\/index_2.0.html."},{"key":"e_1_3_2_2_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/ECRIME.2014.6963161"},{"key":"e_1_3_2_2_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504753"},{"key":"e_1_3_2_2_43_1","unstructured":"Han He. 2020.HanLP: Han Language Processing. https:\/\/github.com\/hankcs\/HanLP  Han He. 2020.HanLP: Han Language Processing. https:\/\/github.com\/hankcs\/HanLP"},{"key":"e_1_3_2_2_44_1","volume-title":"Greystar: Fast and Accurate Detection of SMS Spam Numbers in Large Cellular Networks Using Gray Phone Space. In Presented as part of the 22nd USENIX Security Symposium(USENIX Security 13). 1--16.","author":"Jiang Nan","year":"2013"},{"key":"e_1_3_2_2_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455774"},{"key":"e_1_3_2_2_46_1","first-page":"1","article-title":"On the Spam Campaign Trail","volume":"8","author":"Kreibich Christian","year":"2008","journal-title":"LEET"},{"key":"e_1_3_2_2_47_1","volume-title":"Spamcraft: An Inside Look At Spam Campaign Orchestration. In LEET.","author":"Kreibich Christian","year":"2009"},{"key":"e_1_3_2_2_48_1","unstructured":"Omer Levy and Yoav Goldberg. 2014. Neural word embedding as implicit matrix factorization. In Advances in neural information processing systems. 2177--2185.  Omer Levy and Yoav Goldberg. 2014. Neural word embedding as implicit matrix factorization. In Advances in neural information processing systems. 2177--2185."},{"key":"e_1_3_2_2_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00034"},{"key":"e_1_3_2_2_50_1","unstructured":"Zhenhua Li Weiwei Wang Christo Wilson Jian Chen Chen Qian Taeho Jung Lan Zhang Kebin Liu Xiangyang Li and Yunhao Liu. 2017. FBS-Radar: Uncovering Fake Base Stations at Scale in the Wild. In NDSS.  Zhenhua Li Weiwei Wang Christo Wilson Jian Chen Chen Qian Taeho Jung Lan Zhang Kebin Liu Xiangyang Li and Yunhao Liu. 2017. FBS-Radar: Uncovering Fake Base Stations at Scale in the Wild. In NDSS."},{"key":"e_1_3_2_2_51_1","volume-title":"TraffickStop: De-tecting and Measuring Illicit Traffic Monetization Through Large-scale DNS Analysis. In2019 IEEE European Symposium on Security and Privacy (Euro S&P). IEEE, 560--575","author":"Liu Baojun"},{"key":"e_1_3_2_2_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2018.00072"},{"key":"e_1_3_2_2_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134049"},{"key":"e_1_3_2_2_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/2398776.2398822"},{"key":"e_1_3_2_2_55_1","doi-asserted-by":"publisher","DOI":"10.1145\/1555349.1555352"},{"key":"e_1_3_2_2_56_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939918.2939937"},{"key":"e_1_3_2_2_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.28"},{"key":"e_1_3_2_2_58_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.25"},{"key":"e_1_3_2_2_59_1","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068840"},{"key":"e_1_3_2_2_60_1","volume-title":"Presented as part of the 22nd USENIX Security Symposium(USENIX Security 13). 195--210.","author":"Thomas Kurt"},{"key":"e_1_3_2_2_61_1","volume-title":"Users ReallyDo Answer Telephone Scams. In 28th USENIX Security Symposium (USENIX Security 19)","author":"Tu Huahong","year":"2019"},{"key":"e_1_3_2_2_62_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66332-6_21"},{"key":"e_1_3_2_2_63_1","volume-title":"Malicious base station and detecting malicious base station signal. China Communications11, 8","author":"Zhang Chen","year":"2014"},{"key":"e_1_3_2_2_64_1","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196521"}],"event":{"name":"CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security","location":"Virtual Event USA","acronym":"CCS '20","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417257","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3372297.3417257","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:01:30Z","timestamp":1750197690000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3372297.3417257"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,30]]},"references-count":64,"alternative-id":["10.1145\/3372297.3417257","10.1145\/3372297"],"URL":"https:\/\/doi.org\/10.1145\/3372297.3417257","relation":{},"subject":[],"published":{"date-parts":[[2020,10,30]]},"assertion":[{"value":"2020-11-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}