Measuring and analyzing search-redirection attacks in the illicit online prescription drug trade

Proceedings of the 20th USENIX Security Symposium

Volumn , Issue , 2011, Pages 281-297

  Leontiadis, Nektarios ^a   Moore, Tyler ^b   Christin, Nicolas ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b HARVARD UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INFORMATION RETRIEVAL; QUERY PROCESSING; SALES;

CONVERSION RATES; HEALTH RESOURCES; ILLEGAL DRUGS; ONLINE PHARMACIES; PRESCRIPTION DRUGS; TRAFFIC REDIRECTIONS; WEB SEARCH RESULTS; WEB SEARCHES;

WEBSITES;

EID: 84888088814     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (51)

1. Alexa Web Information Service. http://aws. amazon.com/awis/.
2. Google Web Search API. https://code. google.com/apis/websearch/.
3. Legitscript LLC. http://www. legitscript.com/.
4. Open Directory project. http://www.dmoz. org/.
5. The Apache SpamAssassin Project. http:// spamassassin.apache.org/.
6. Yahoo Site Explorer. http:// siteexplorer.search.yahoo.com/.
7. D. Anderson, C. Fleizach, S. Savage, and G. Voelker. Spamscatter: Characterizing internet scam hosting infrastructure. In Proc. USENIX Security' 07, pp. 1-14. Boston, MA, Aug. 2007.
8. N. Christin, S. Yanagihara, and K. Kamataki. Dissecting one click frauds. In Proc. ACM CCS'10, pp. 15-26, Chicago, IL, October 2010.
9. R. Clayton. How much did shutting down McColo help? In Proc. CEAS'09, July 2009.
10. D. Cox. Regression models and life-tables. J. Royal Stat. Soc., Series B, 34:187-220, 1972.
11. R. Dingledine, N. Mathewson, and P. Syverson. Tor: The second-generation onion router. In Proc. USENIX Security'04, pp. 303-320, San Diego, CA, August 2004.
12. J. Dunn. Srizbi grows into world's largest botnet. CSO, May 2008. http://www.csoonline. com/article/356219/srizbi-growsinto-world-s-largest- botnet.
13. Experian Hitwise. Experian Hitwise reports Bing-powered share of searches reaches 30 percent in March 2011. http://www.hitwise.com/ us/press-center/press-releases/ experian-hitwise-reports-bingpowered-share-of-s/. April 2011.
14. R. Fielding, J. Gettys, J. Mogul, H. Frystyk, L. Masinter, P. Leach, and T. Berners-Lee. RFC2616: Hypertext Transfer Protocol-HTTP/1.1. June 1999.
15. U.S. Food and Drug Administration. National drug code directory, Nov. 2010. http://www.fda.gov/Drugs/ InformationOnDrugs/ucm142438.htm.
16. J. Franklin, V. Paxson, A. Perrig, and S. Savage. An inquiry into the nature and causes of the wealth of internet miscreants. In Proc. ACM CCS'07, pp. 375-388, Alexandria, VA, Oct. 2007.
17. C. Grier, K. Thomas, V. Paxson, and M. Zhang. @spam: The underground in 140 characters or less. In Proc. ACM CCS'10, pp. 27-37, Chicago, IL, Oct. 2010.
18. J. Henney, J. Shuren, S. Nightingale, and T. McGinnis. Internet purchase of prescription drugs: Buyer beware. Ann. Int. Med., 131(11):861-862, Dec. 1999.
19. K. Jackson Higgins. Google, GoDaddy help form group to fight fake online pharmacies. Dark Reading, Dec. 2010. http: //www.darkreading.com/security/ privacy/228800671/google-godaddyhelp-form-group-to-fight-fakeonline-pharmacies.html.
20. T. Joachims, L. Granka, B. Pan, H. Hembrooke, and G. Gay. Accurately interpreting clickthrough data as implicit feedback. In Proc. ACM SIGIR'05, pp. 154-161, Salvador, Brazil, Aug. 2005.
21. G. Jolly. Explicit estimates from capture-recapture data with both death and immigration - stochastic model. Biometrika, 52(1-2):225-247, 1965.
22. C. Kanich, C. Kreibich, K. Levchenko, B. Enright, G. Voelker, V. Paxson, and S. Savage. Spamalytics: An empirical analysis of spam marketing conversion. In Proc. ACM CCS'08, pp. 3-14, Alexandria, VA, Oct. 2008.
23. E. Kaplan and P. Meier. Nonparametric estimation from incomplete observations. J. Am. Stat. Assoc., 53:457-481, 1958.
24. K. Levchenko, N. Chachra, B. Enright, M. Felegyhazi, C. Grier, T. Halvorson, C. Kanich, C. Kreibich, H. Liu, D. McCoy, A. Pitsillidis, N. Weaver, V. Paxson, G. Voelker, and S. Savage. Click trajectories: End-to-end analysis of the spam value chain. In Proc. IEEE Symp. Sec. and Privacy, Oakland, CA, May 2011. To appear.
25. C. Littlejohn, A. Baldacchino, F. Schifano, and P. Deluca. Internet pharmacies and online prescription drug sales: A cross-sectional study. Drugs: Edu., Prev., and Policy, 12(1):75-80, 2005.
26. McAfee. Mapping the Mal Web., 2010. http://us.mcafee.com/en-us/local/ docs/Mapping_Mal_Web.pdf.
27. T. Moore and R. Clayton. Examining the impact of website take-down on phishing. In Proc. APWG eCrime'07, pp. 1-13, Pittsburgh, PA, Oct. 2007.
28. T. Moore and R. Clayton. The consequence of noncooperation in the fight against phishing. In Proc. APWG eCrime'08, Atlanta, GA, October 2008.
29. T. Moore and R. Clayton. Evil searching: Compromise and recompromise of internet hosts for phishing. In Proc. Financial Crypto'09, LNCS 5628, pp. 256-272, Barbados, February 2009.
30. T. Moore, R. Clayton, and R. Anderson. The economics of online crime. J. Econ. Persp., 23(3):3-20, Summer 2009.
31. T. Moore, R. Clayton, and H. Stern. Temporal correlations between spam and phishing websites. In Proc. USENIX LEET'09, Boston, MA, April 2009.
32. J. Nazario and T. Holz. As the net churns: Fast-flux botnet observations. In Proc. MALWARE'08, pp. 24-31, Fairfax, VA, October 2008.
33. Y. Niu, H. Chen, F. Hsu, Y.-M. Wang, and M. Ma. A quantitative study of forum spamming using context-based analysis. In Proc. ISOC NDSS'07. San Diego, CA, Feb. 2007.
34. A. Ntoulas, M. Najork, M. Manasse, and D. Fetterly. Detecting spam web pages through content analysis. In Proc. WWW'06, pp. 83-92, Edinburgh, Scotland, May 2006.
35. Department of Justice. Implementation of the Ryan Haight Online Pharmacy Consumer Protection Act of 2008. Fed. Reg., 74(64):15596-15625, 2009.
36. G. Palla, I. Derény, I. Farkas, and T. Vicsek. Uncovering the overlapping community structure of complex networks in nature and society. Nature, 435:814-818, June 2005.
37. D. Pauli. Srizbi botnet sets new records for spam. PCWorld, May 2008. http: //www.pcworld.com/businesscenter/ article/145631/srizbi_botnet_sets_ new_records_for_spam.html.
38. PhpBB Ltd. PhpBB website. http://www. phpbb.com.
39. A. Pitsillidis, K. Levchenko, C. Kreibich, C. Kanich, G.M. Voelker, V. Paxson, N. Weaver, and S. Savage. Botnet Judo: Fighting Spam with Itself. In Proc. ISOC NDSS'10, San Diego, CA, March 2010.
40. N. Provos, P. Mavrommatis, M. Rajab, and F. Monrose. All your iFrames point to us. In Proc. USENIX Security'08, pp. 1-16, San Jose, CA, Aug. 2008.
41. U. Nandini Raghavan, R. Albert, and S. Kumara. Near linear time algorithm to detect community structures in large-scale networks. Phys. Rev. E, 76:036106, 2007.
42. A. Ramachandran and N. Feamster. Understanding the network-level behavior of spammers. In Proc. ACM SIGCOMM'06, pp. 291-302, Pisa, Italy, Sep. 2006.
43. J. Reichardt and S. Bornholdt. Statistical mechanics of community detection. Phys. Rev. E, 74(1):016110, July 2006.
44. D. Samosseiko. The partnerka - what is it, and why should you care? In Virus Bulletin Conf., 2009.
45. R. Thomas and J. Martin. The underground economy: Priceless. ;login:, 31(6):7-16, December 2006.
46. Verisign. The domain industry brief, 2010. http://www.verisigninc.com/assets/ Verisign_DNIB_Nov2010_WEB.pdf.
47. Y.-M. Wang, M. Ma, Y. Niu, and H. Chen. Spam double-funnel: Connecting web spammers with advertisers. In Proc. WWW'07, pp. 291-300, Banff, AB, Canada, May 2007.
48. T. Wilson. Researchers link storm botnet to illegal pharmaceutical sales. Dark Reading, June 2008. http://www.darkreading. com/security/security-management/ 211201114/index.html.
49. Wordpress. Wordpress website, September 2009. http://www.wordpress.org.
50. Y. Xie, F. Yu, K. Achan, R. Panigrahy, G. Hulten, and I. Osipkov. Spamming botnets: Signatures and characteristics. ACM SIGCOMM Comp. Comm. Rev., 38(4):171-182, 2008.
51. J. Zhuge, T. Holz, C. Song, J. Guo, X. Han, and W. Zou. Studying malicious websites and the underground economy on the Chinese web. In Managing Information Risk and the Economics of Security, pp. 225-244. Springer, 2008.