Fighting unicode-obfuscated spam

ACM International Conference Proceeding Series

Volumn 269, Issue , 2007, Pages 45-59

  Liu, Changwei ^a   Stamm, Sid ^a  

^a INDIANA UNIVERSITY   (United States)

Author keywords

deobfuscated emails; obfuscated emails; spam emails; SpamAssassin; unicode characters

Indexed keywords

BYPASS FILTERS; HEURISTIC RULES; IMAGE-BASED SPAM; PHISHING; PROTOTYPE TOOLS; SPAM EMAILS; SPAM FILTER; SPAMMERS; STANDARD METHOD; UNICODES;

ELECTRONIC MAIL; JAVA PROGRAMMING LANGUAGE; SECURITY OF DATA;

INTERNET;

EID: 77953908448     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1299015.1299020     Document Type: Conference Paper

References (28)

1. S. Ahmed, F. Mithun, "Word Stemming to Enhance Spam Filtering," in the Conference on Email and Anti-Spam (CEAS'04) 2004. http://www.ceas.cc/ papers-2004/167.
2. R. Cockerham, "There are 600,426,974,379,824,381,952 ways to spell Viagra." http://cockeyed.com/lessons/viagra/viagra.html. Retrieved on 25 July 2007.
3. D. Cook,J. Hartnett,K. Manderson,J. Scanlan, "Catching Spam Before it Arrives:Domain Specific Dynamic Blacklists," http://crpit.com/ confpapers/CRPITV54Cook.pdf.
4. L. F. Cranor, B. A. LaMacchia, "Spam!" Communications of the ACM, August 1998.
5. A. Y. Fu, W. Zhang, X. Deng, W. Liu, "Safeguard against unicode attacks: generation and Application of UC-simlist," in the 15th International World Wide Web Conference (WWW'06), May 2006.
6. A. Y. Fu, X. Deng, W. Liu, G. Little, "The Methodology and an Application to Fight Against Unicode Attacks," in Proceedings of the Second Symposium on Usable Privacy and Security (SOUPS'06) July 2006. ACM Press.
7. F. D. Garcia, J.H. Hoepman, J. V. Nieuwenhuizen, "Spam Filter Analysis," arXiv report, February 2004. Available at http://arxiv.org/PS- cache/cs/pdf/0402/0402046v1.pdf
8. S. L. Garfinkel and R. C. Miller, "Johnny 2: a user test of key continuity management with S/MIME and Outlook Express," Proceedings of the 2005 Symposium on Usable Privacy and Security, 2005, pp. 13-24
9. P. Graham, "Better Bayesian Filtering," Spam Conference, January 2003. Available at http://www.paulgraham.com/better.html.
10. E. Gabber, M. Jakobsson, Y. Matias, A. Mayer, "Curbing Junk E-mail via Secure Classification," Financial Cryptograpy, 1998.
11. E. Gabrilovich, A. Gontmakher, "The Homograph Attack," Communications of the ACM, February 2002.
12. J. Goodman, G. V. Cormack, D. Heckerman, "Spam and the Ongoing Battle for the Inbox," Communications of the ACM, February 2007.
13. R. J. Hall, "Channels: Avoiding Unwanted Electronic Mail," Communications of the ACM, Volume 41 Issue 3, 1998.
14. R. J. Hall, "A Countermeasure to Duplicate-detecting Anti-spam Techniques," Available at http://citeseer.ist.psu.edu/279802.html, accessed 25 July 2007.
15. M. Jakobsson, "Modeling and Preventing Phishing Attacks," Phishing Panel in Financial Cryptography 2005. Available at www.informatics. indiana.edu/markus/papers/phishing-jakobsson.pdf
16. M. Jakobsson, J. Linn, J. Algesheimer, "How to Protect Against a Militant Spammer," http://www.informatics.indiana.edu/markus/papers/spam. pdf, accessed 1 July 2007.
17. M. Jakobsson and S. A. Myers (Eds.), Phishing and Countermeasures: Understanding the Increasing Problem of Electronic Identity Theft. ISBN 0-471-78245-9, Hardcover, 739 pages, December 2006.
18. J. Nazario, "Phishing Corpus," http://monkey.org/~jose/blog/ viewpage.php?page=phishing-corpus. Accessed 22 May 2007.
19. U. Shardanand, P. Maes, "Social Information Filtering: Algorithms for Automating 'Word of Mouth'," Proceedings of the SIGCHI Conference on Human Factors in Computing Systems. May 1995.
20. B. Thorson, "How Spammers Bypass E-mail Security," EE Times, 25 July 2007. http://www.eetimes.com/showArticle.jhtml?articleID=23900564
21. A. Tsow and M. Jakobsson, "Deceit and Deception: A Large User Study of Phishing," Technical Report TR649, Indiana University, August 2007. http://www.cs.indiana.edu/pub/techreports/TR649.pdf
22. S. Srikwan, M. Jakobsson, "Using Cartoons to Teach Internet Security." DIMACS Technical Report 2007-11, July 2007. http://www. informatics.indiana.edu/markus/documents/security-education.pdf
23. CRM114. http://crm114.sourceforge.net, Accessed 22 May 2007.
24. Anti-Phishing Group of City University of Hong Kong, http://antiphishing. cs.cityu.edu.hk.
25. Messaging Anti-Abuse Working Group, Email Metrics Program: "The Network Operator's Perspective, Report #4 - 3rd and 4th Quarters 2006," Available at http://www.maawg.org/about/MAAWGMetric-2006-3-4-report.pdf
26. SpamAssassin. http://wiki.apache.org/spamassassin, Accessed 22 May 2007.
27. SpamAssassin Readme file. http://www.cpan.org/modules/by-module/Mail/ Mail-SpamAssassin-2.64.readme Accessed 22 May 2007.
28. SpamAssassin public Corpus, http://spamassassin.apache.org/publiccorpus, Accessed 25 May 2006.