Automatic identification of replicated criminal websites using combined clustering

Proceedings - IEEE Symposium on Security and Privacy

Volumn 2014-January, Issue , 2014, Pages 116-123

  Drew, Jake ^a   Moore, Tyler ^a  

^a Southern Methodist University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTOMATION; CLUSTER ANALYSIS; COMPUTER CRIME; COMPUTER PRIVACY; CRIME; INVESTMENTS;

CLUSTERING METHODS; CONSENSUS CLUSTERING; CYBER CRIMINALS; ESCROW SERVICES; HIGH YIELD; INVESTMENT PROGRAMS; PHISHING;

WEBSITES;

EID: 84939515921     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SPW.2014.26     Document Type: Conference Paper

References (27)

1. H. Abdi. Encyclopedia of Measurement and Statistics, pages 598-605. SAGE Publications, Inc., 2007
2. H. Abdi, A. O'Toole, D. Valentin, and B. Edelman. Distatis: The analysis of multiple distance matrices. In Computer Vision and Pattern Recognition-Workshops, 2005. CVPR Workshops. IEEE Computer Society Conference on, pages 42-42, June 2005
3. H. Abdi, L. J. Williams, D. Valentin, and M. Bennani-Dosse. Statis and distatis: optimum multitable principal component analysis and three way metric multidimensional scaling. Wiley Interdisciplinary Reviews: Computational Statistics, 4(2):124-167, 2012
4. D. S. Anderson, C. Fleizach, S. Savage, and G. M. Voelker. Spamscatter: Characterizing Internet scam hosting infrastructure. In Proceedings of 16th USENIX Security Symposium, pages 10:1-10:14, Berkeley, CA, USA, 2007. USENIX Association
5. E. Dimitriadou, A. Weingessel, and K. Hornik. A combination scheme for fuzzy clustering. International Journal of Pattern Recognition and Artificial Intelligence, 16(07):901-912, 2002
6. R. Dingledine, N. Mathewson, and P. Syverson. Tor: The secondgeneration onion router. In 13th USENIX Security Symposium, Aug. 2004
7. A. V. Fiacco and G. P. McCormick. Nonlinear programming: sequential unconstrained minimization techniques. Number 4. Siam, 1990
8. D. Florencio and C. Herley. Evaluating a trial deployment of password re-use for phishing prevention. In Second APWG eCrime Researchers Summit, eCrime '07, pages 26-36, New York, NY, USA, 2007. ACM
9. A. Gordon and M. Vichi. Fuzzy partition models for fitting a set of partitions. Psychometrika, 66(2):229-247, 2001
10. K. Hornik. A clue for cluster ensembles. 2005
11. S. C. Johnson. Hierarchical clustering schemes. Psychometrika, 32(3):241-254, 1967
12. C. Kanich, C. Kreibich, K. Levchenko, B. Enright, G. Voelker, V. Paxson, and S. Savage. Spamalytics: An empirical analysis of spam marketing conversion. In Conference on Computer and Communications Security (CCS), Alexandria, VA, Oct. 2008
13. E. Kaplan and P. Meier. Nonparametric estimation from incomplete observations. Journal of the American Statistical Association, 53:457-481, 1958
14. S. Krolak-Schwerdt. Three-way multidimensional scaling: Formal properties and relationships between scaling methods. In D. Baier, R. Decker, and L. Schmidt-Thieme, editors, Data Analysis and Decision Support, Studies in Classification, Data Analysis, and Knowledge Organization, pages 82-90. Springer Berlin Heidelberg, 2005
15. P. Langfelder, B. Zhang, and S. Horvath. Defining clusters from a hierarchical cluster tree. Bioinformatics, 24(5):719-720, Mar. 2008
16. R. Layton, P. Watters, and R. Dazeley. Automatically determining phishing campaigns using the uscap methodology. In eCrime Researchers Summit (eCrime), 2010, pages 1-8, Oct 2010
17. N. Leontiadis, T. Moore, and N. Christin. Pick your poison: pricing and inventories at unlicensed online pharmacies. In Proceedings of the fourteenth ACM conference on Electronic commerce, pages 621-638. ACM, 2013
18. K. Levchenko, A. Pitsillidis, N. Chachra, B. Enright, M. Félegyházi, C. Grier, T. Halvorson, C. Kanich, C. Kreibich, H. Liu, D. McCoy, N. Weaver, V. Paxson, G. M. Voelker, and S. Savage. Click trajectories: End-to-end analysis of the spam value chain. In Proceedings of the 2011 IEEE Symposium on Security and Privacy, SP '11, pages 431-446, Washington, DC, USA, 2011. IEEE Computer Society
19. J.-L. Lin. Detection of cloaked web spam by using tag-based methods. Expert Syst. Appl., 36(4):7493-7499, May 2009. Available at http://dx. doi. org/10. 1016/j. eswa. 2008. 09. 056
20. T. Moore and R. Clayton. Examining the impact of website take-down on phishing. In Second APWG eCrime Researchers Summit, eCrime '07, Pittsburgh, PA, Oct. 2007. ACM
21. T. Moore and R. Clayton. The Impact of Incentives on Notice and Take-down, pages 199-223. Springer, 2008
22. T. Moore, J. Han, and R. Clayton. The postmodern Ponzi scheme: Empirical analysis of high-yield investment programs. In A. D. Keromytis, editor, Financial Cryptography, volume 7397 of Lecture Notes in Computer Science, pages 41-56. Springer, 2012
23. N. Provos, P. Mavrommatis, M. Rajab, and F. Monrose. All your iFrames point to us. In 17th USENIX Security Symposium, Aug. 2008
24. W. M. Rand. Objective criteria for the evaluation of clustering methods. Journal of the American Statistical Association, 66(336):846-850, 1971
25. T. Urvoy, E. Chauveau, P. Filoche, and T. Lavergne. Tracking web spam with html style similarities. ACM Trans. Web, 2(1):3:1-3:28, Mar. 2008
26. D. Y. Wang, S. Savage, and G. M. Voelker. Cloak and dagger: dynamics of web search cloaking. In Proceedings of the 18th ACM conference on Computer and communications security, CCS '11, pages 477-490, New York, NY, USA, 2011. ACM. Available at http://doi. Acm. org/10. 1145/ 2046707. 2046763
27. B. Wardman and G. Warner. Automating phishing website identification through deep MD5 matching. In eCrime Researchers Summit, 2008, pages 1-7. IEEE, 2008.