Filtering spam from bad neighborhoods

International Journal of Network Management

Volumn 20, Issue 6, 2010, Pages 433-444

  Van Wanrooij, Ward ^a   Pras, Aiko ^b  

^a Chronowerx Holding   (Netherlands)

^b UNIVERSITY OF TWENTE   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

DETECTION CAPABILITY; EMAIL MESSAGES; IP ADDRESSS; MAIL SERVERS; SMALL LOAD; SPAM DETECTION;

ELECTRONIC MAIL; INTERNET PROTOCOLS;

INTERNET;

EID: 78649264191     PISSN: 10557148     EISSN: 10991190     Source Type: Journal    
DOI: 10.1002/nem.753     Document Type: Article

References (36)

1. Symantec. State of Spam: A Monthly Report, June 2009. [9 June 2010].
2. Sophos. Only one in 28 emails legitimate, July 2008. [9 June 2010].
3. Spamhaus. Effective Spam Filtering. [July 2009 ].
4. The SpamAssassin Project. SpamAssassin. [July 2009 ].
5. Hoanca B,. How good are our weapons in the SPAM wars. IEEE Technology and Society magazine 2006; 25 (1): 22-30.
6. Desika P, Srivastava J,. Analyzing network traffic to detect e-mail spamming machines. In Proceedings of the 2004 ICDM Workshop on Privacy and Security Aspects of Data Mining (PSDM'04), Brighton, UK, November 2004.
7. Schatzmann D, Burkhart M, Spyropoulos T,. Inferring spammers in the network core. In Proceedings of 10th International Conference on Passive and Active Network Measurement (PAM'09), Seoul, Korea, April 2009.
8. Ramachandran A, Feamste N, Vempala S,. Filtering spam with behavioral blacklisting. In Proceedings of the 14th ACM conference on Computer and Communications Security (CCS'07), Alexandria, VA, October 2007.
9. Pathak A, Hu YC, Mao ZM,. Peeking into spammer behavior from a unique vantage point. In Proceedings of the 1st USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET'08), San Francisco, CA, April 2008.
10. Kreibich C, Kanich C, Levchenko K, Enright B, Voelker GM, Paxson V, Savage S,. On the spam campaign trail. In Proceedings of 1st USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET'08), San Francisco, CA, April 2008.
11. Zhuang L, Dunagan J, Simon DR, Wang HJ, Osipkov I, Hulten G, Tygar JD,. Characterizing botnets from email spam records. In Proceedings of 1st USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET'08), San Francisco, CA, April 2008.
12. Cheng B-C, Chen M-J, Chu Y-S, Chen A, Yap S, Fan K-P,. A stateful and flow-based intrusion prevention system for email applications. In Proceedings of the IFIP International Conference on Network and Parallel Computing (NPC'07), Dalian, China, September 2007.
13. Schatzmann D, Burkhart M, Spyropoulos T,. Flow-level characteristics of spam and ham. TIK Report No. 291, Computer Engineering and Networks Laboratory, ETH, Zurich, August 2008.
14. Žádník M, Michlovský Z, Is spam visible in flow-level statistic- CESNET technical report, June 2008.
15. Sperotto A, Vliek G, Sadre R, Pras A,. Detecting spam at the network level. In Proceedings of the 15th EUNICE International Workshop (EUNICE'09), Barcelona, Spain, September 2009.
16. Vliek G., Detecting spam machines, a Netflow-data based approach. MSc thesis, University of Twente, Netherlands, February 2009. [9 June 2010].
17. Spamhaus Project. ZEN. [July 2009 ].
18. IronPort Systems. SpamCop.net-SpamCop FAQ: What is the SpamCop Blocking List (SCBL)- [July 2009 ].
19. Makey J,. Blacklists compared. [July 2009 ].
20. Jung J, Sit E,. An empirical study of spam traffic and the use of DNS black lists. In Proceedings of the ACM SIGCOMM Internet Measurement Conference (IMC'04), Taormina, Sicily, October 2004.
21. Ramachandran A, Feamster N,. Understanding the network-level behavior of spammers. In Proceedings of the 2006 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM'06), Pisa, Italy, September 2006.
22. Ramachandran A, Dagon D, Feamster N,. Can DNS-based blacklists keep up with bots- In Proceedings of the 3rd Conference on Email and Anti-Spam (CEAS'06), Mountain View, CA, July 2006.
23. Rajab MA, Zarfoss J, Monrose F, Terzis A,. My botnet is bigger than yours (maybe, better than yours): why size estimates remain challenging. In Proceedings of the 1st USENIX Workshop on Hot Topics in Understanding Botnets (HotBots'07), Cambridge, MA, April 2007.
24. Munroe R,. Map of the Internet: the IPv4 space, 2006. [July 2009].
25. Irwin B, Pilkington N,. High level Internet scale traffic visualization using Hilbert curve mapping. In Proceedings of the Workshop on Visualization for Computer Security (VizSEC 2007), Sacramento, CA, October 2007.
26. Collins MP, Shimeall TJ, Faber S, Janies J, Weaver R, De Shon M, Kadane JB,. Using uncleanliness to predict future botnet addresses. In Proceedings of the ACM SIGCOMM Conference on Internet Measurement (IMC'07), San Diego, CA, October 2007.
27. Langelund P,. PI assignment size, August 2006. [9 June 2010].
28. SURBL. [July 2009 ].
29. URIBL.COM. URIBL.COM: Realtime URI Blacklist. [July 2009 ].
30. CBL. [July 2009 ].
31. DSBL.org. [November 2008 ].
32. van Riel R,. Passive Spam Block List. [July 2009 ].
33. Spamhaus Project. DROP. [July 2009 ].
34. Tokarev M,. rbldnsd: small daemon for DNSBLs. [July 2009 ].
35. Combs G,. Wireshark. [July 2009 ].
36. ImproWare. Swinog URIBL. [July 2009 ].