Fishing for phishes: Applying capture-recapture methods to estimate phishing populations

ACM International Conference Proceeding Series

Volumn 269, Issue , 2007, Pages 14-25

  Weaver, Rhiannon ^a   Collins, M Patrick ^a  

^a CERT Network Situational Awareness Group   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CAPTURE-RECAPTURE; CAPTURE-RECAPTURE METHOD; COMPLEX RELATIONSHIPS; ESTIMATION TECHNIQUES; PHISHERS; PHISHING; POPULATION ESTIMATE; WILDLIFE CONSERVATION;

CONSERVATION; MOBILE TELECOMMUNICATION SYSTEMS; POPULATION STATISTICS;

SECURITY OF DATA;

EID: 77953910522     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1299015.1299017     Document Type: Conference Paper

References (19)

1. M. Abu Rajab, J. Zarfoss, F. Monrose, and A. Terzis. My botnet is bigger than yours (maybe, better than yours): why size estimates remain challenging. In Proceedings of the first annual workshop on hot topics in botnets, March 2007.
2. L. Briand, K. Emam, B. Freimut, and O. Laitenberger. A comprehensive evaluation of capture-recatpure models for estimating software defect content. IEEE Transcripts of Software Engineering, 26:518-540, 2000.
3. W. S. Cleveland. Robust locally weighted regression and smoothing scatterplots. Journal of the American Statistical Association, 74:829-836, 1979.
4. M. Collins, T. Shimeall, S. Faber, J. Janies, R. Weaver, M. De Shon, and J. Kadane. Using uncleanliness to predict future botnet addresses. In Proceedings of the 2007 Internet Measurement Conference, October 2007.
5. E. Cooke, F. Jahanian, and D. McPherson. The zombie roundup: Understanding, detecting and disturbing botnets. In Proceedings of the First Workshop on Steps to reducing unwanted traffic on the internet (SRUTI), July 2005.
6. D. Dagon, C. Zou, and W. Lee. Modeling botnet propagation using time zones. In Proceedings of the 13th Network and Distributed Security Symposium (NDSS), February 2006.
7. J. Darroch, S. Fienberg, G. Glonek, and B. Junker. A three-sample multiple-recapture approach to census population estimation with heterogenous catchability. Journal of the American Statistical Association, 88:1137-1148, 1993.
8. S. Fienberg. The Analysis of Cross-Classified Categorical Data. MIT Press, 1980.
9. F. Freiling, T. Holz, and G. Wicherski. Botnet tracking: Exploring a root-cause methodology to prevent denial-of-service attacks. In Proceedings of the 10th European Symposium on Research in Computer Security (ESORICS), September 2005.
10. V. I. Levenshtein. Binary codes capable of correcting deletions, insertions, and reversals. Technical Report 8, Soviet Physics Doklady, 1966.
11. S. Lohr. Sampling Design and Analysis. Duxbury Press, 1999.
12. P. McCullagh and J. Nelder. Generalized Linear Models. Chapman and Hall/CRC, 1989.
13. D. Moore, C. Shannon, D. Brown, G. Voelker, and S. Savage. Inferring internet denial-of-service activity. ACM Transactions on Computer Systems, 24(2), 2006.
14. T. Moore and R. Clayton. An empirical analysis of the current state of phishing attack and defence. In Proceedings of the 2007 Workshop on the Economics of Information Security (WEIS), 2007.
15. A. Ramachandran and N. Feamster. Understanding the network-level behavior of spammers. In SIGCOMM '06: Proceedings of the 2006 conference on Applications, technologies, architectures, and protocols for computer communications, pages 291-302, New York, NY, USA, 2006. ACM Press.
16. A. Ramachandran, N. Feamster, and D. Dagon. Revealing botnet membership using DNSBL counter-intelligence. In Proceedings of the 2006 USENIX workshop on steps for reducing unwanted traffic on the internet (SRUTI), 2006.
17. J. Rawlings, S. Pantula, , and D. Dickey. Applied Regression Analysis. Springer-Verlag, New York Inc., 1998.
18. R. Thomas and J. Martin. The underground economy: Priceless. Usenix ;login:, 31(6), December 2006.
19. J. Wittes. Applications of a multinomial capture-recapture model to epidemiological data. Journal of the American Statistical Association, 69:93-97, 1974.