KaPoW webmail: Effective disincentives against spam

7th Annual Collaboration, Electronic Messaging, Anti-Abuse and Spam Conference, CEAS 2010

Volumn , Issue , 2010, Pages

  Feng, Wu Chang ^a   Kaiser, Ed ^a  

^a PORTLAND STATE UNIVERSITY   (United States)

Author keywords

Client puzzles; Proof of work; Spam; Webmail

Indexed keywords

COMPUTATIONAL EFFICIENCY; ELECTRONIC MAIL; OPERATING COSTS; WEBSITES;

CLIENT PUZZLES; GOOGLE GMAIL; MICROSOFT; PROOF-OF-WORK; SPAM; SPAMMERS; WEB-BASED INTERFACE; WEBMAIL;

INTERNET;

EID: 84904807205     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (44)

1. AnonWhois.org. The Anonymous Whois List. http://anonwhois.org.
2. T. Aura, P. Nikander, and J. Leiwo. DoS-Resistant Authentication with Client Puzzles. In Workshop on Security Protocols, April 2000.
3. A. Back. Hashcash: A Denial of Service Counter-Measure. Technical report, Cypherspace, August 2002. http://www.hashcash.org/papers/hashcash.pdf.
4. L. Baird. Big Integer Library v. 5.1. http://www.leemon.com.
5. D. Boneh. Twenty Years of Attacks on the RSA Cryptosystem. Notices of the American Mathematical Society, 46(2), 1999.
6. Cisco Systems. Cisco Annual Security Report, December 2008. http://newsroom.cisco.com/dlls/2008/prod-121508.html.
7. D. Danchev. Gmail, Yahoo and Hotmail's CAPTCHA Broken by Spammers, July 2008. ZDNet News.
8. D. Dean and A. Stubblefield. Using Client Puzzles to Protect TLS. In USENIX Security Symposium, August 2001.
9. DShield.org. Distributed Intrusion Detection System. http://www.dshield. org.
10. C. Dwork and M. Naor. Pricing via Processing or Combatting Junk Mail. In CRYPTO, August 1992.
11. W. Feng. The Case for TCP/IP Puzzles. In ACM SIGCOMM Workshop on Future Directions in Network Architecture (FDNA), August 2003.
12. W. Feng and E. Kaiser. The Case for Public Work. In IEEE Global Internet Symposium, May 2007.
13. W. Feng, E. Kaiser, W. Feng, and A. Luu. The Design and Implementation of Network Puzzles. In IEEE INFOCOM, March 2005.
14. GetAFreelancer.com. Captcha Entry Projects. http://www.getafreelancer. com/projects/by-tag/captcha-entry.html.
15. J. Golbeck and J. Hendler. Reputation Network Analysis for Email Filtering. In CEAS, July 2004.
16. J. Goodman and R. Rounthwaite. Stopping Outgoing Spam. In ACM Conference on Electronic Commerce, May 2004.
17. S. Hocevar. PWNtcha-Captcha Decoder. http://sam.zoy.org/pwntcha.
18. IronPort Systems. IronPort Research Discovers Links Between Malware Originators and Illegal Online Pharmaceutical Supply Chain, June 2008. http://www.ironport.com/company/ironport-pr-2008-06-11.html.
19. A. Juels and J. Brainard. Client Puzzles: A Cryptographic Defense Against Connection Depletion. In NDSS, February 1999.
20. E. Kaiser and W. Feng. mod kaPoW: Protecting the Web with Transparent Proof-of-Work. In IEEE Global Internet Symposium, April 2008.
21. E. Kaiser and W. Feng. Helping TicketMaster: Changing the Economics of Ticket Robots with Geographic Proof-of-Work. In IEEE Global Internet Symposium, March 2010.
22. D. Kesmodel. Codes on Sites 'Captcha' Anger of Web Users, May 2006. Wall Street Journal.
23. B. Laurie and R. Clayton. 'Proof-of-Work' Proves Not to Work'. In Workshop on Economics and Information Security, May 2004.
24. MaxMind, Inc. Geolocation and Online Fraud Prevention from MaxMind. http://www.maxmind.com.
25. MessageLabs. MessageLabs Intelligence Report: May 2009. http://www.messagelabs.com/intelligence.aspx.
26. OpenSSL Project. OpenSSL: The Open Source Toolkit for SSL/TLS. http://www.openssl.org.
27. B. Parno, D. Wendlandt, E. Shi, A. Perrig, B. Maggs, and Y. Hu. Portcullis: Protecting Connection Setup from Denial-of-Capability Attacks. In ACM SIGCOMM, August 2007.
28. Portland State University. Portland State University Webmail. http://webmail.pdx.edu.
29. S. Prasad. Google's CAPTCHA Busted in Recent Spammer Tactics, February 2008. http://securitylabs.websense.com/content/Blogs/2919.aspx.
30. Project Honey Pot. Http:BL. http: //www.projecthoneypot.org/httpbl.php.
31. R. Malmgren and J. Hofman and L. Amaral and D. Watts. Characterizing Individual Communication Patterns. In ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, July 2009.
32. R. Rivest, A. Shamir, and D. Wagner. Time-lock puzzles and timed-release Crypto. Technical report, MIT, March 1996. MIT/LCS/TR-684.
33. D. Shanks. Class Number, A Theory of Factorization and Genera. In Symposia in Pure Mathematics, 1971.
34. SpamAssassin. The Apache SpamAssassin Project. http://spamassassin. apache.org.
35. spamcop.net. SpamCop. http://www.spamcop.net/.
36. Spamhaus Project Ltd. Spamhaus Project. http://spamhaus.org/.
37. R. Stross. Hannah Montana Tickets on Sale! Oops, They're Gone, December 2007. New York Times.
38. SURBL Community. SURBL. http://www.surbl.org.
39. The Horde Project. The Horde Project. http://www.horde.org.
40. URIBL. Realtime URI Blacklist. http://www.uribl.com.
41. L. von Ahn, M. Blum, N. Hopper, and J. Langford. CAPTCHA: Using Hard AI Problems for Security. In CRYPTO, August 2003.
42. X. Wang and M. Reiter. Defending Against Denial-of-Service Attacks with Puzzle Auctions. In IEEE Symposium on Security and Privacy (S&P), May 2003.
43. X. Wang and M. Reiter. Mitigating Bandwidth-Exhaustion Attacks Using Congestion Puzzles. In ACM CCS, October 2004.
44. Z. Zhong, K. Huang, and K. Li. Throttling Outgoing SPAM for Webmail Services. In CEAS, July 2005.