Workload models of spam and legitimate e-mails

Performance Evaluation

Volumn 64, Issue 7-8, 2007, Pages 690-714

  Gomes, Luiz Henrique ^a   Cazita, Cristiano ^a   Almeida, Jussara M ^a   Almeida, Virgílio ^a   Meira Jr , Wagner ^a  

^a FEDERAL UNIVERSITY OF MINAS GERAIS   (Brazil)

Author keywords

E mail traffic; Performance; SPAM; Workload characterization

Indexed keywords

COMPUTER VIRUSES; DATA COMMUNICATION SYSTEMS; MATHEMATICAL MODELS; TRAFFIC CONTROL;

E-MAIL TRAFFIC; SPAM; WORKLOAD CHARACTERIZATION;

ELECTRONIC MAIL;

EID: 34247142447     PISSN: 01665316     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.peva.2006.11.001     Document Type: Article

References (47)

1. Message Labs Home Page, http://www.messagelabs.co.uk/
2. M. Nelson, Anti-spam for business and ISPs: Market size 2003-2008, Tech. rep., Ferris Research Inc. 408 Columbus Ave., Suite 1, San Francisco, CA, April 2003
3. D. Fallows, Spam: How it is hurting email and degrading life on the internet, Tech. rep., Pew and Internet American Life Project 1100 Connecticut Avenue, NW-Suite 710 Washington, D.C. 20036, October 2003
4. L. Rainie, D. Fallows, The can-spam act has not helped most email users so far, Tech. rep., Pew and Internet American Life Project 1100 Connecticut Avenue, NW-Suite 710 Washington, D.C. 20036, March 2004
5. R.D. Twining, M.M. Williamson, M. Mowbray, M. Rahmouni, Email prioritization: Reducing delays on legitimate mail caused by Junk Mail, in: Proceedings of the Usenix Annual Technical Conference, Boston, MA, 2004, pp. 45-58
6. MAPS-mail abuse prevention system home page, http://mail-abuse.org/rbl/getoff.html
7. Harris E. The next step in the spam control war: Greylisting. http://projects.puremagic.com/greylisting
8. Cranor L.F., and LaMacchia B.A. Spam!. Communications of the ACM 41-8 (1998) 74-83
9. H.P. Baker, Authentication approaches, in: Proceedings of the 56th IETF Meeting, San Francisco, CA, 2003
10. B. Krishnamurthy, SHRED: Spam harassment reduction via economic disincentives, in: Proceedings of the 56th IETF Meeting, San Francisco, CA, 2003
11. H.P. Brandmo, Solving spam by establishing a platform for sender accountability, in: Proceedings of the 56th IETF Meeting, San Francisco, CA, 2003
12. M. Sahami, S. Dumais, D. Heckerman, E. Horvitz, A Bayesian approach to filtering junk e-mail, Tech. Rep. WS-98-05, AAAI Workshop on Learning for Text Categorization, Madison, WI, July 1998
13. Fawcett T. In vivo spam filtering: A challenge problem for KDD. SIGKDD Explor. Newsl. 5 2 (2003) 140-148
14. F. Zhou, L. Zhuang, B. Zhao, L. Huang, A. Joseph, J. Kubiatowicz, Approximate object location and spam filtering on peer-to-peer systems, in: Proceedings of the Middleware, Rio de Janeiro, Brazil, 2003, pp. 1-20
15. Boykin P.O., and Roychowdhury V. Leveraging social networks to fight spam. IEEE Computer 38 4 (2005) 61-68
16. P. Desikan, J. Srivastava, Analyzing network traffic to detect e-mail spamming machines, in: Proceedings of the ICDM Workshop on Privacy and Security Aspects of Data Mining, Brighton, UK, 2004, pp. 67-76
17. L.H. Gomes, F.D.O. Castro, R.B. Almeida, L.M.A. Bettencourt, V.A.F. Almeida, J.M. Almeida, Improving spam detection based on structural similarity, in: Steps to Reducing Unwanted Traffic on the Interne Workshop, July 2005
18. S. Atkins, Size and cost of the problem, in: Proceedings of the 56th IETF Meeting, San Francisco, CA, 2003
19. L. Bertolotti, M.C. Calzarossa, Workload characterization of mail servers, in: Proceedings of the SPECTS 2000, Elsevier Science Publishers B. V., Vancouver, Canada, 2000, pp. 301-307
20. Bertolotti L., and Calzarossa M.C. Models of mail server workloads. Performance Evaluation 46 2-3 (2001) 65-76
21. L.H. Gomes, R.B. Almeida, L.M.A. Bettencourt, V.A.F. Almeida, J.M. Almeida, Comparative graph theoretical characterization of networks of spam and regular email, in: Second Conference on Email and Anti-Spam, July 2005
22. Jung J., and Sit E. An empirical study of spam traffic and the use of DNS black lists. Proceedings of the 4th ACM SIGCOMM Conference on Internet Measurement (2004), ACM Press, Taormina, Italy 370-375
23. Gomes L.H., Cazita C., Almeida J., Almeida V.A.F., and Meira Jr. W. Characterizing a spam traffic. Proceedings of the 4th ACM SIGCOMM Conference on Internet Measurement (2004), ACM Press, Taormina, Italy 356-369
24. Ramachandran A., and Feamster N. Understanding the network level behavior of spammers. Proceedings of the 4th ACM SIGCOMM Conference on Internet Measurement (2006), ACM Press, Pisa, Italy 293-302
25. Arlitt M., and Williamson C. Web server workload characterization: The search of invariants. Proceedings of the 1996 Sigmetrics Conference on Measurement of Computer Systems (1996), ACM Press, Philadelphia, PA 126-137
26. Veloso E., Almeida V., Meira W., Bestavros A., and Jin S. A hierarchical characterization of a live streaming media workload. Proceedings of the Second ACM SIGCOMM Workshop on Internet Measurement (2002), ACM Press, Marseille, France 117-130
27. Almeida J.M., Krueger J., Eager D.L., and Vernon M.K. Analysis of educational media server workloads. Proceedings of the 11th Int'l, Workshop on Network and Operating System Support for Digital Audio and Video (2001), ACM Press, Port Jefferson, New York, NY 21-30
28. Costa C., Cunha I., Borges A., Ramos C., Rocha M., Almeida J., and Ribeiro-Neto B. Analyzing client interativity in streaming media. Proceedings of the 13th World Wide Web Conference - WWW 2004 (2004), ACM Press, New York, NY 534-543
29. Gummadi K.P., Dunn R.J., Saroiu S., Gribble S.D., Levy H.M., and Zahorjan J. Measurement, modeling, and analysis of a peer-to-peer file-sharing workload. Proceedings of the 19th ACM Symposium on Operating Systems Principles (2003), ACM Press, Bolton Landing, NY 151-160
30. Dewes C., Wichmann A., and Feldmann A. An analysis of internet chat systems. Proceedings of the 2003 ACM SIGCOMM Conference on Internet Measurement (2003), ACM Press, Miami Beach, FL 51-64
31. Exim Internet Mailer Home Page, http://www.exim.org
32. AMaViS - home page, http://www.amavis.org
33. Trend micro home page, http://www.trendmicro.com
34. SpamAssassin home page, http://www.spamassassin.org
35. What is a dictionary attack?. http://www.filterpoint.com/help/dictionary.html
36. Paxson V., and Floyd S. Wide area traffic: The failure of Poisson modeling. IEEE/ACM Transactions on Networking 3 3 (1995) 226-244
37. B. Massey, M. Thomure, R.B.S. Long, Learning spam: simple techniques for freely-available software, in: Proceedings of the 2003 Usenix Annual Technical Conference, San Antonio, TX, 2003
38. W. Gansterer, M. Ilger, P. Lechner, R. Newmayer, J. Straub, Anti-spam methods - state-of-the-art, Tech. Rep. FA 384108 - Spam-Abwehr, Institute of Distributed and Multimedia Systems, Faculty of Computer Science. University of Vienna, Austria, March 2005
39. A.K. Seewald, A close look at current approaches in spam filtering, Tech. Rep. TR-2005-04, Austrian Research Institute for Artificial Intelligence, Freyung 6/6, A-1010 Vienna, Austria, April 2005
40. Ebel H., Mielsch L.-I., and Bornhold S. Scale-free topology of e-mail networks. Physical Review E 66-035103(R) (2002) 1-3
41. Newman M.E., Forrest S., and Balthrop J. Email networks and the spread of computer viruses. Physical Review E 66-035101(R) (2002) 1-4
42. V. Almeida, A. Bestavros, M. Crovella, A. de Oliveira, Characterizing reference locality in the WWW, in: Proceedings of the IEEE Conference on Parallel and Distributed Information Systems (PDIS), Miami Beach, FL, 1996, pp. 92-103
43. Trivedi K.S. Probability and Statistics with Reliability, Queuing, and Computer Science Applications (2001), John Wiley & Sons, New York, NY
44. The list guy home page, http://www.listguy.com/email-sent.html
45. Eckmann J.P., Moses E., and Sergi D. Entropy of dialogs creates coerent structures in e-mail traffic. PNAS - Proceedings of the National Academy of Sciences 101-14333 40 (2004) 333-337
46. Zipf G.K. Human Behavior and the Principle of Least-Effort (1949), Addison-Wesley, Cambridge, MA
47. L. Cherkasova, G. Ciardo, Characterizing temporal locality and its impact on web server performance, in: Proceedings of the Int'l Conf. on Computer Communications and Networks, IEEE, Las Vegas, NV, 2000, pp. 16-18