Catching spam before it arrives: domain specific dynamic blacklists
eCite Digital Repository (University of Tasmania)Published 1 January 2006Open access
Duncan Francis Cook, Jacky Hartnett, K Manderson, Joel Scanlan
Citations58
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
Research is described that aims to deny spam entry into the internal network in the first place by recognising precursor activity from spammers in real time, establishing certainty that this IP address is about to send or is currently sending spam packets and to deny packets from this IP addresses at a range of communicating gateways.
Abstract
The arrival of any piece of unsolicited and unwanted email (spam) into a user's email inbox is a problem. It results in real costs to organisations and possibly an increasing reluctance to use email by some users. Currently most spam prevention techniques rely on methods that examine the whole email message at the mail server. This paper describes research that aims to deny spam entry into the internal network in the first place.
Keywords
Computer Science
A Bayesian Approach to Filtering Junk E-Mail
1,153 Citations1998Mehran Sahami, Susan Dumais +2 more
This work examines methods for the automated construction of filters to eliminate such unwanted messages from a user’s mail stream, and shows the efficacy of such filters in a real world usage scenario, arguing that this technology is mature enough for deployment.
Fast portscan detection using sequential hypothesis testing
668 Citations2004Jaeyeon Jung, Vern Paxson +2 more
TRW (Threshold Random Walk), an online detection algorithm that identifies malicious remote hosts requires a much smaller number of connection attempts compared to previous schemes, while also providing theoretical bounds on the low probabilities of missed detection and false alarms.
ComputerIntrusion detection: a brief history and overview
383 Citations2002Richard A. Kemmerer, Giovanni Vigna
The paper considers data collection issues, intrusion detection techniques, system effectiveness and network wide analysis of intrusion detection systems and their applications in the cloud.
The Cuckoo's Egg : Tracking a Spy Through the Maze of Computer Espionage
209 Citations1991Clifford Stoll
Cliff Stoll begins a one-man hunt of his own, spying on the spyand plunged into an incredible international probe that finally gained the attention of top U.S. counterintelligence agents.
An empirical study of spam traffic and the use of DNS black lists
186 Citations2004Jaeyeon Jung, Emil Sit
Reputation Network Analysis for Email Filtering.
183 Citations2004Jennifer Golbeck, James Hendler
An email scoring mechanism based on a social network augmented with reputation ratings is presented, and an algorithm for inferring reputation ratings between individuals is presented and demonstrated through experiments that it is accurate based on current data.
ComputerSpam and the social-technical gap
61 Citations2004Brian Whitworth, Elizabeth Whitworth
This work proposes bridging the gap between society and technology by applying social concepts to technology design and suggests the continued growth of spam is a social problem that needs a social response.
Proceedings of the 1st international symposium on Information and communication technologiesSpam filters: bayes vs. chi-squared; letters vs. words
57 Citations2003Cormac O’Brien, Carl Vogel
The Naive Bayesian method is examined in relation to the 'Chi by degrees of Freedom' approach, the latter used in the field of authorship identification, and statistics based on character-level tokenization proves more effective than word-level.
IEEE Security & PrivacyCanning Spam: Proposed Solutions to Unwanted Email
48 Citations2005Shari Lawrence Pfleeger, G. Bloom
The magnitude of the problem, the reasons for proliferation, some interventions available today, and the degree to which each has been effective are described.
Spam Filter Analysis
46 Citations2004Flavio D. Garcia, Jaap-Henk Hoepman +1 more
It is shown that genetic algorithm based spam filters perform best at server level and naive Bayesian filters are the most appropriate for filtering at user level.
IEEE Security & PrivacyThe making of a spam zombie army. Dissecting the Sobig worms
32 Citations2003E. Levy
On 25 June 2003, a new mass-mailing worm, Sobig.E, emerged, which is the fifth revision of a worm that first raised its ugly head in January 2003.
Filtering spam e-mail on a global scale
21 Citations2004Geoff Hulten, J.T. Goodman +1 more
A very large junk e-mail corpus which was generated by a hundred thousand volunteer users of the Hotmail e- mail service is analyzed to analyze: the geographic origins of the e-mails who the E-mail is targeting and what the e -mail is selling.
QueueSpam, Spam, Spam, Spam, Spam, the FTC, and Spam
15 Citations2003Eric Allman
The Federal Trade Commission held a forum on spam in Washington, D.C., April 30 to May 2 that was a really good, content-full event that ran the gamut from ardent anti-spammers all the way to hard-core spammers and everyone in between.
ComputerSpam hits instant messaging
10 Citations2004L.D. Paulson
Two antispim, rule-based, filtering products that, for example, prevent users from clicking through links that might take them to an executable that would let a Trojan horse take over their systems are launched.
Open Access Repository (University of Tasmania)A Context Aware Attack Detection System Across Multiple Gateways
3 Citations2004Joel Scanlan, S Lorimer +2 more
A system that detects and forestalls the continuation of both fast attacks and slow attacks across several IP addresses is described and the development of heuristics both to ban activity from hostile IP addresses and then lift these bans is illustrated.
Open Access Repository (University of Tasmania)Intrusion Detection by Intelligent analysis of data across multiple gateways in real-time.
3 Citations2004Joel Scanlan, S Lorimer +2 more
The validity of using a central server to amalgamate, reduce and analyse the log files of each gateway is investigated in order to examine the activities of the scans across multiple gateways and port numbers.
ComputerIntel develops silicon that switches optical signals
1 Citations2004L.D. Paulson
Intel researchers have developed a prototype silicon-based modulator that switches light-based signals and promises to move photonics to silicon, which merges lower-priced silicon technology with high-speed, fiber optics.