{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,27]],"date-time":"2025-10-27T18:08:54Z","timestamp":1761588534549,"version":"build-2065373602"},"reference-count":21,"publisher":"IBM","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IBM J. Res. & Dev."],"published-print":{"date-parts":[[2016,7]]},"DOI":"10.1147\/jrd.2016.2558018","type":"journal-article","created":{"date-parts":[[2016,7,27]],"date-time":"2016-07-27T14:48:29Z","timestamp":1469630909000},"page":"4:1-4:10","source":"Crossref","is-referenced-by-count":8,"title":["Firstfilter: A cost-sensitive approach to malicious URL detection in large-scale enterprise networks"],"prefix":"10.1147","volume":"60","author":[{"given":"L.","family":"Vu","sequence":"first","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"P.","family":"Nguyen","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"D.","family":"Turaga","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"3082","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2584679"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523670"},{"key":"ref12","first-page":"11","article-title":"Detecting malware domains at the upper DNS hierarchy","author":"antonakakis","year":"0","journal-title":"Proc 20th USENIX Conf Security"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068842"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.25"},{"key":"ref15","first-page":"1","article-title":"Automated web patrol with strider honeymonkeys: Finding web sites that exploit browser vulnerabilities","author":"wang","year":"0","journal-title":"Proc NDSS"},{"key":"ref16","first-page":"1","article-title":"Large-scale automatic classification of phishing pages","author":"whittaker","year":"0","journal-title":"Proc NDSS"},{"key":"ref17","first-page":"1","article-title":"Behind phishing: An examination of phisher modi operandi","author":"mcgrath","year":"0","journal-title":"Proceedings of USENIX Workshop on LEET"},{"journal-title":"N-gram character sequence analysis of benign vs malicious domains\/URLs","year":"0","author":"geide","key":"ref18"},{"journal-title":"HTTP 1 1 Header Definition","year":"0","key":"ref19"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2013.6682747"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/2487575.2487647"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2013.3"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2435349.2435366"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2487788.2487942"},{"key":"ref7","first-page":"11","article-title":"Detecting malicious web links and identifying their attack types","author":"choi","year":"0","journal-title":"Proc 2nd USENIX Conf Web Appl Develop"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/1963405.1963436"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1961189.1961202"},{"key":"ref9","first-page":"1","article-title":"Two-phase malicious web page detection scheme using misuse and anomaly detection","volume":"2","author":"yoo","year":"2014","journal-title":"Int J Rel Inf Assurance"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/312129.312220"},{"key":"ref21","first-page":"345","article-title":"A probabilistic interpretation of precision, recall and F-score, with implication for evaluation","author":"goutte","year":"0","journal-title":"Proceedings of the European Colloquium on IR Research"}],"container-title":["IBM Journal of Research and Development"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5288520\/7523342\/07523343.pdf?arnumber=7523343","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,27]],"date-time":"2025-10-27T18:03:20Z","timestamp":1761588200000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7523343\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,7]]},"references-count":21,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1147\/jrd.2016.2558018","relation":{},"ISSN":["0018-8646","0018-8646"],"issn-type":[{"type":"print","value":"0018-8646"},{"type":"electronic","value":"0018-8646"}],"subject":[],"published":{"date-parts":[[2016,7]]}}}