Shades of Grey: On the effectiveness of reputation-based blacklists

3rd International Conference on Malicious and Unwanted Software, MALWARE 2008

Volumn , Issue , 2008, Pages 57-64

  Sinha, Sushant ^a   Bailey, Michael ^a   Jahanian, Farnam ^a  

^a UNIVERSITY OF MICHIGAN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BLACKHOLE LISTS; FALSE NEGATIVES; FALSE POSITIVES; MALICIOUS CODES; MALICIOUS HOSTS; MALWARE; NETWORK BLOCKS; POPULAR TECHNIQUES; REAL TIMES; UNSOLICITED EMAIL;

CODES (SYMBOLS); INTERNET;

COMPUTER CRIME;

EID: 58149096147     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MALWARE.2008.4690858     Document Type: Conference Paper

References (20)

1. The apache spamassassin project. htzp://spamassassin. apache.org/.
2. Gentoo linux. http://www.genzoo.org/.
3. Not just another bogus list, http://njabl.org.
4. Nuclear Elephant: The DSPAM Project, htzp://www.nuclearelephanz.com.
5. Pyzor. http://pyzor.sourceforge.ner/.
6. Sorbs DNSBL. http://www.sorbs.net.
7. spamcop.net - beware of cheap imitations. htzp://www.sparr.cop.net/.
8. The spamhaus project, http://www.spamhaus.org.
9. Vipul's razor, hzzp://razor, sourceforge.net/.
10. Arbor Networks. Worldwide infrastructure security report, Sept. 2007.
11. Michael Bailey, Jon Oberheide, Jon Andersen, Z. Morley Mao, Farnam Jahanian, and Jose Nazario. Automated classification and analysis of internet malware. In Proceedings of the 10th International Symposium on Recent Advances in Intrusion Detection (RAID'07), September 2007.
12. Anirudh Ramachandran, David Dagon, and Nick Feamster. Can dns-based blacklists keep up with bots? In CEAS, 2006.
13. Anirudh Ramachandran and Nick Feamster. Understanding the network-level behavior of spammers. In SIGCOMM '06: Conference on Applications, technologies, architectures, and protocols for computer communications, pages 291-302, New York, NY, USA, 2006. ACM Press.
14. Anirudh Ramachandran, Nick Feamster, and Santosh Vem-pala. Filtering spam with behavioral blacklisting. In CCS '07: Proceedings of the 14th ACM conference on Computer and communications security, pages 342-351, New York, NY, USA, 2007. ACM.
15. Johannes Ullrich. DShield. http://www.dshield. org,2000.
16. Shobha Venkataraman, Subhabrata Sen, Oliver Spatscheck, Patrick Haffher, and Dawn Song. Exploiting network structure for proactive spam mitigation. In Proceedings of 16th USENIX Security Symposium, pages 1-18, Berkeley, CA, USA, 2007. USENIX Association.
17. Tim Weber. Criminals may overwhelm the web. hztp://news.bbc.co.uk/1/hi/ business/6298641.stir, January 2007.
18. Rafal Wojtczuk. libnids, June 2004.
19. Yinglian Xie, Fang Yu, Kannan Achan, Eliot Gillum, Metises Goldszmidt, and Ted Wobber. How dynamic are IP addresses? In SIGCOMM '07: Conference on Applications, technologies, architectures, and protocols for computer communications, pages 301-312, New York, USA, 2007.
20. Jian Zhang, Phillip Porras, and Johannes Ullrich. Highly predictive blacklisting. In Usenix Security Symposium, 2008.