{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2022,3,30]],"date-time":"2022-03-30T12:25:38Z","timestamp":1648643138958},"reference-count":30,"publisher":"Institute of Electronics, Information and Communications Engineers (IEICE)","issue":"8","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEICE Trans. Inf. & Syst."],"published-print":{"date-parts":[[2017]]},"DOI":"10.1587\/transinf.2016icp0011","type":"journal-article","created":{"date-parts":[[2017,7,31]],"date-time":"2017-07-31T22:19:42Z","timestamp":1501539582000},"page":"1714-1728","source":"Crossref","is-referenced-by-count":3,"title":["Fine-Grained Analysis of Compromised Websites with Redirection Graphs and JavaScript Traces"],"prefix":"10.1587","volume":"E100.D","author":[{"given":"Yuta","family":"TAKATA","sequence":"first","affiliation":[{"name":"NTT Secure Platform Laboratories"},{"name":"Waseda University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mitsuaki","family":"AKIYAMA","sequence":"additional","affiliation":[{"name":"NTT Secure Platform Laboratories"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Takeshi","family":"YAGI","sequence":"additional","affiliation":[{"name":"NTT Secure Platform Laboratories"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Takeshi","family":"YADA","sequence":"additional","affiliation":[{"name":"NTT Secure Platform Laboratories"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shigeki","family":"GOTO","sequence":"additional","affiliation":[{"name":"Waseda University"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"532","reference":[{"key":"1","doi-asserted-by":"crossref","unstructured":"[1] Y. Takata, M. Akiyama, T. Yagi, T. Yada, and S. Goto, \u201cWebsite forensic investigation to identify evidence and impact of compromise,\u201d Proc. International Conference on Security and Privacy in Communication Networks (SecureComm), pp.431-453, 2016. 10.1007\/978-3-319-59608-2_25","DOI":"10.1007\/978-3-319-59608-2_25"},{"key":"2","unstructured":"[2] Symantec Corporation, \u201cInternet security threat report 2014 ::Volume 19,\u201d http:\/\/www.symantec.com\/content\/en\/us\/enterprise\/other_resources\/b-istr_main_report_v19_21291018.en-us.pdf, 2014."},{"key":"3","unstructured":"[3] Sophos Ltd., \u201cSecurity threat report 2014,\u201d https:\/\/www.sophos.com\/en-us\/medialibrary\/PDFs\/other\/sophos-security-threat-report-2014.pdf, 2014."},{"key":"4","unstructured":"[4] H. Kobayashi and T. Uchiyama, \u201cKeeping eyes on malicious websites-\u2018ChkDeface\u2019 against fraudulent sites,\u201d The 27th Annual FIRST Conference, 2015."},{"key":"5","unstructured":"[5] Japan's Ministry of Internal Affairs and Communications, \u201cACTIVE: Advanced Cyber Threats response InitiatiVE,\u201d http:\/\/www.active.go.jp\/en\/"},{"key":"6","doi-asserted-by":"crossref","unstructured":"[6] F. Li, G. Ho, E. Kuan, Y. Niu, L. Ballard, K. Thomas, E. Bursztein, and V. Paxson, \u201cRemedying web hijacking: Notification effectiveness and webmaster comprehension,\u201d Proc. International World Wide Web Conference (WWW), pp.1009-1019, 2016. 10.1145\/2872427.2883039","DOI":"10.1145\/2872427.2883039"},{"key":"7","unstructured":"[7] N. Mavrommatis and M. Monrose, \u201cAll your iFRAMEs point to us,\u201d Proc. USENIX Security Symposium, pp.1-15, 2008."},{"key":"8","doi-asserted-by":"crossref","unstructured":"[8] B. Eshete and V.N. Venkatakrishnan, \u201cWebWinnow: Leveraging exploit kit workflows to detect malicious URLs,\u201d Proc. ACM Conference on Data and Application Security and Privacy (CODASPY), pp.305-312, 2014. 10.1145\/2557547.2557575","DOI":"10.1145\/2557547.2557575"},{"key":"9","doi-asserted-by":"crossref","unstructured":"[9] B. Min and V. Varadharajan, \u201cA simple and novel technique for counteracting exploit kits,\u201d Proc. International Conference on Security and Privacy in Communication Networks (SecureComm), Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering, vol.152, pp.259-277, Springer International Publishing, Cham, 2015. 10.1007\/978-3-319-23829-6_19","DOI":"10.1007\/978-3-319-23829-6_19"},{"key":"10","doi-asserted-by":"crossref","unstructured":"[10] L. Lu, R. Perdisci, and W. Lee, \u201cSURF: Detecting and measuring search poisoning categories and subject descriptors,\u201d Proc. ACM Conference on Computer and Communications Security (CCS), pp.467-476, 2011. 10.1145\/2046707.2046762","DOI":"10.1145\/2046707.2046762"},{"key":"11","doi-asserted-by":"crossref","unstructured":"[11] D.Y. Wang, S. Savage, and G.M. Voelker, \u201cCloak and dagger: Dynamics of web search cloaking,\u201d Proc. ACM Conference on Computer and Communications Security (CCS), pp.477-490, 2011. 10.1145\/2046707.2046763","DOI":"10.1145\/2046707.2046763"},{"key":"12","doi-asserted-by":"crossref","unstructured":"[12] K. Borgolte, C. Kruegel, and G. Vigna, \u201cDelta: Automatic identification of unknown web-based infection campaigns,\u201d Proc. ACM Conference on Computer and Communications Security (CCS), pp.109-120, 2013. 10.1145\/2508859.2516725","DOI":"10.1145\/2508859.2516725"},{"key":"13","doi-asserted-by":"crossref","unstructured":"[13] Z. Li, S. Alrwais, X. Wang, and E. Alowaisheq, \u201cHunting the red fox online: Understanding and detection of mass redirect-script injections,\u201d Proc. IEEE Symposium on Security and Privacy (SP), pp.3-15, 2014. 10.1109\/sp.2014.8","DOI":"10.1109\/SP.2014.8"},{"key":"14","unstructured":"[14] TripWire, http:\/\/www.tripwire.com\/"},{"key":"15","unstructured":"[15] G. Xie, M. Iliofotou, T. Karagiannis, M. Faloutsos, and Y. Jin, \u201cReSurf: Reconstructing web-surfing activity from network traffic,\u201d IFIP Networking Conference, pp.1-9, 2013."},{"key":"16","unstructured":"[16] T. Nelms, R. Perdisci, M. Antonakakis, and M. Ahamad, \u201cWebWitness: Investigating, categorizing, and mitigating malware download paths,\u201d Proc. USENIX Security Symposium, pp.1025-1040, 2015."},{"key":"17","doi-asserted-by":"publisher","unstructured":"[17] M. Akiyama, T. Yagi, Y. Kadobayashi, T. Hariu, and S. Yamaguchi, \u201cClient honeypot multiplication with high performance and precise detection,\u201d IEICE Trans. Inf. & Syst., vol.E98-D, no.4, pp.775-787, April 2015. 10.1587\/transinf.2014icp0002","DOI":"10.1587\/transinf.2014ICP0002"},{"key":"18","doi-asserted-by":"crossref","unstructured":"[18] C. Neasbitt, R. Perdisci, K. Li, and T. Nelms, \u201cClickMiner: Towards forensic reconstruction of user-browser interactions from network traces categories and subject descriptors,\u201d Proc. ACM Conference on Computer and Communications Security (CCS), pp.1244-1255, 2014. 10.1145\/2660267.2660268","DOI":"10.1145\/2660267.2660268"},{"key":"19","doi-asserted-by":"crossref","unstructured":"[19] N. Nikiforakis, A. Kapravelos, W. Joosen, C. Kruegel, F. Piessens, and G. Vigna, \u201cCookieless monster: Exploring the ecosystem of web-based device fingerprinting,\u201d Proc. IEEE Symposium on Security and Privacy (SP), pp.541-555, 2013. 10.1109\/sp.2013.43","DOI":"10.1109\/SP.2013.43"},{"key":"20","unstructured":"[20] Intel Security, Inc., \u201cStyx exploit kit takes advantage of vulnerabilities,\u201d https:\/\/blogs.mcafee.com\/mcafee-labs\/styx-exploit-kit-takes-advantage-of-vulnerabilities\/, June 2013."},{"key":"21","unstructured":"[21] Intel Security, Inc., \u201cRed kit an emerging exploit pack,\u201d https:\/\/blogs.mcafee.com\/mcafee-labs\/red-kit-an-emrging-exploit-pack\/, Jan. 2013."},{"key":"22","doi-asserted-by":"crossref","unstructured":"[22] L. Lu, V. Yegneswaran, P. Porras, and W. Lee, \u201cBLADE: An attack-agnostic approach for preventing drive-by malware infections,\u201d Proc. ACM Conference on Computer and Communications Security (CCS), pp.440-450, 2010. 10.1145\/1866307.1866356","DOI":"10.1145\/1866307.1866356"},{"key":"23","doi-asserted-by":"crossref","unstructured":"[23] M. Cova, C. Kruegel, and G. Vigna, \u201cDetection and analysis of drive-by-download attack and JavaScript code,\u201d Proc. International World Wide Web Conference (WWW), pp.281-290, 2010. 10.1145\/1772690.1772720","DOI":"10.1145\/1772690.1772720"},{"key":"24","unstructured":"[24] A. Dell'Aera, \u201cThug,\u201d http:\/\/buffer.github.io\/thug\/"},{"key":"25","unstructured":"[25] C. Curtsinger, B. Livshits, B. Zorn, and C. Seifert, \u201cZOZZLE: Fast and precise in-browser JavaScript malware detection,\u201d Proc. USENIX Security Symposium, p.3, 2011."},{"key":"26","doi-asserted-by":"crossref","unstructured":"[26] D. Canali, M. Cova, and G. Vigna, \u201cProphiler: A fast filter for the large-scale detection of malicious web pages categories and subject descriptors,\u201d Proc. World Wide Web Conference (WWW), pp.197-206, 2011. 10.1145\/1963405.1963436","DOI":"10.1145\/1963405.1963436"},{"key":"27","doi-asserted-by":"crossref","unstructured":"[27] J. Zhang, C. Seifert, J.W. Stokes, and W. Lee, \u201cARROW: GenerAting SignatuRes to Detect DRive-By DOWnloads,\u201d Proc. International World Wide Web Conference (WWW), pp.187-196, 2011. 10.1145\/1963405.1963435","DOI":"10.1145\/1963405.1963435"},{"key":"28","doi-asserted-by":"crossref","unstructured":"[28] G. Stringhini, C. Kruegel, and G. Vigna, \u201cShady paths: Leveraging surfing crowds to detect malicious web pages categories and subject descriptors,\u201d Proc. ACM Conference on Computer and Communications Security (CCS), pp.133-144, 2013. 10.1145\/2508859.2516682","DOI":"10.1145\/2508859.2516682"},{"key":"29","doi-asserted-by":"crossref","unstructured":"[29] H. Mekky, R. Torres, Z.-L. Zhang, S. Saha, and A. Nucci, \u201cDetecting malicious HTTP redirections using trees of user browsing activity,\u201d Proc. IEEE International Conference on Computer Communications (INFOCOM), pp.1159-1167, 2014. 10.1109\/infocom.2014.6848047","DOI":"10.1109\/INFOCOM.2014.6848047"},{"key":"30","doi-asserted-by":"crossref","unstructured":"[30] L. Invernizzi, K. Thomas, and A. Kapravelos, \u201cCloak of visibility: Detecting when machines browse a different web,\u201d Proc. IEEE Symposium on Security and Privacy (SP), pp.743-758, 2016. 10.1109\/sp.2016.50","DOI":"10.1109\/SP.2016.50"}],"container-title":["IEICE Transactions on Information and Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transinf\/E100.D\/8\/E100.D_2016ICP0011\/_pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,1]],"date-time":"2019-10-01T21:37:11Z","timestamp":1569965831000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.jstage.jst.go.jp\/article\/transinf\/E100.D\/8\/E100.D_2016ICP0011\/_article"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"references-count":30,"journal-issue":{"issue":"8","published-print":{"date-parts":[[2017]]}},"URL":"https:\/\/doi.org\/10.1587\/transinf.2016icp0011","relation":{},"ISSN":["0916-8532","1745-1361"],"issn-type":[{"value":"0916-8532","type":"print"},{"value":"1745-1361","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017]]}}}