On the effectiveness of IP reputation for spam filtering

2010 2nd International Conference on COMmunication Systems and NETworks, COMSNETS 2010

Volumn , Issue , 2010, Pages

  Esquivel, Holly ^a   Akella, Aditya ^a   Mori, Tatsuya ^b  

^a UNIVERSITY OF WISCONSIN MADISON   (United States)

^b NTT Service Integration Laboratories   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION CHECK; CONTENT-BASED; FILTERING MECHANISM; IP ADDRESSS; LIGHT WEIGHT; POLICY FRAMEWORK; SPAM FILTERING;

COMMUNICATION SYSTEMS; INTERNET; SERVERS;

INTERNET PROTOCOLS;

EID: 77952149776     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/COMSNETS.2010.5431981     Document Type: Conference Paper

References (35)

1. "Its not about the spam," http://googleblog.blogspot.com/2007/ 10/its-not-about-spam.html.
2. "Spam Reaches All-Time High of 95% of All Email," http://www.commtouch.com/Site/News-Events/pr-content.asp?new-sid=942&cat-id= 1.
3. J. Levine, DNS Blacklists and Whitelists, IRTF Anti-Spam Rsearch Group, Nov 2008, internet Draft draft-irtf-asrg-dnsbl-08.txt.
4. "DNS Whitelist - Protect against false positives," http://www.dnswl.org/.
5. "The Spamhaus Project," http://www.spamhaus.org/.
6. "SenderBase," http://www.senderbase.org/.
7. "Greylisting," http://www.greylisting.org/.
8. "Sender Policy Framework," http://www.openspf.org/.
9. "IRTF The Anti Spam Research Group wiki, DNS validation," http://wiki.asrg.sp.am/wiki/DNS-validation.
10. "Spam domain blacklist," http://www.joewein.de/sw/blacklist. htm.
11. R. Clayton, "Stopping outgoing spam by examining incoming server logs," 2005.
12. Y. Xie, F. Yu, K. Achan, R. Panigrahy, G. Hulten, and I. Osipkov, "Spamming botnets: signatures and characteristics," in SIGCOMM, 2008.
13. L. von Ahn, M. Blum, and J. Langford, "Telling humans and computers apart automatically," in Commun. ACM, 47(2):56-60, 2004., 2004.
14. "Hotmail Operators: Private Communication."
15. A. Ramachandran and N. Feamster, "Understanding the network-level behavior of spammers," in SIGCOMM, 2006.
16. F. Li and M.-H. Hsieh, "An empirical study of clustering behavior of spammers and group-based anti-spam strategies," in CEAS 2006: Third Conference on Email and Anti-Spam, 2006.
17. K. Chiang and L. Lloyd, "A case study of the rustock rootkit and spam bot," in The First Workshop in Understanding Botnets, 2007.
18. Y. Xie, F. Yu, K. Achan, E. Gillum, M. Goldszmidt, and T. Wobber, "How dynamic are ip addresses?" in SIGCOMM, 2007.
19. "Not Just Another Bogus List," http://www.njabl.org/.
20. L. Eggert, "SPF Deployment Trends," https://fit.nokia.com/lars/ meter/spf.html.
21. "Suggested generic DNS naming schemes for large networks and unassigned hosts," http://tools.ietf.org/wg/dnsop/draft-msullivan-dnsop- generic-naming-schemes-00.txt, April 2006.
22. "Levenshtein Distance," http://en.wikipedia.org/wiki/ Levenshtein-distance/.
23. H. Esquivel, T. Mori, and A. Akella, "Router-level spam filtering using tcp fingerprints: Architecture and measurement-based evaluation," in CEAS, 2009.
24. T. Mori, H. Esquivel, A. Akella, A. Shimoda, and S. Goto, "Understanding the world.s worst spamming botnet," University of Wisconsin Madison Tech Report TR1660, June 2009.
25. H. Stern, "The rise and fall of reactor mailer," in Proc. MIT Spam Conference 2009, Mar 2009.
26. "BGP Tables from the University of Oregon RouteViews Project," http://moat.nlanr.net/AS/data.
27. A. Ramachandran, N. Feamster, and D. Dagon, "Revealing botnet membership using DNSBL counter-intelligence," in SRUTI, 2006.
28. X. Hu and Z. M. Mao, "Accurate real-time identification of ip prefix hijacking," in IEEE Symposium on Security and Privacy, 2007.
29. C. Zheng, L. Ji, D. Pei, J. Wang, and P. Francis, "A light-weight distributed scheme for detecting ip prefix hijacks in real-time," SIGCOMM, 2007.
30. "Distributed Sender Black List," http://dsbl.org/usage.
31. M. Xie, H. Yin, and H. Wang, "Thwarting Email Spam Laundering," ACM Transactions on Information and System Security, 2008.
32. A. Ramachandran, N. Feamster, and S. Vempala, "Filtering spam with behavioral blacklisting," in CCS, 2007.
33. S. Venkataraman, S. Sen, O. Spatscheck, P. Haffner, and D. Song, "Exploiting network structure for proactive spam mitigation," in USENIX Security, 2007.
34. R. Beverly and K. Sollins, "Exploiting transport-level characteristics of spam," in CEAS, Aug. 2008.
35. J. Jung and E. Sit, "An empirical study of spam traffic and the use of DNS black lists," in IMC, 2004.