Understanding large-scale spamming botnets from Internet edge sites

7th Annual Collaboration, Electronic Messaging, Anti-Abuse and Spam Conference, CEAS 2010

Volumn , Issue , 2010, Pages

  Mori, Tatsuya ^a   Esquivel, Holly ^b   Akella, Aditya ^b   Shimoda, Akihiro ^c   Goto, Shigeki ^c  

^a NTT CORPORATION   (Japan)

^b UNIVERSITY OF WISCONSIN MADISON   (United States)

^c WASEDA UNIVERSITY   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

INTERNET SERVICE PROVIDERS; SPAMMING;

BOTNETS; E-MAIL DELIVERY; EDGE SITES; LARGE VOLUMES; MEASUREMENT STUDY; PACKET TRACES; SPACE DOMAIN; SPAM MESSAGES;

MALWARE;

EID: 84904815650     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (25)

1. Barracuda Networks Predicts Spam Volumes Beyond 95 Percent in 2009. http://www.barracudanetworks. com/ns/news and events/index.php?nid=322,December 2008.
2. Hosting firm takedown bags 500,000 bots. http://www.computerworld.com/s/ article/9120727/Hosting firm takedown bags 500 000 bots, November 2008.
3. Kaspersky Lab analyses new version of Kido (Conficker). http://www.kaspersky.com/news?id=207575791, April 2009.
4. Brian Krebs. Host of Internet Spam Groups Is Cut Off. http://www.washingtonpost.com/wp-dyn/content/article/2008/11/12/AR2008111200658 pf.html, November 2008.
5. K. Chiang and L. Lloyd. A case study of the rustock rootkit and spam bot. In The First Workshop in Understanding Botnets, 2007.
6. Commtouch. Q3 2007 Email Threats Trend Report. http://www.commtouch.com/ downloads/Commtouch 2007 Q3 Email Threats.pdf.
7. H. Esquivel, T. Mori, and A. Akella. Router-Level Spam Filtering Using TCP Fingerprints: Architecture and Measurement-Based Evaluation. In CEAS, 2009.
8. Joe Stewart. Bobax Trojan Analysis. http://www. secureworks.com/research/ threats/bobax/, May 2007.
9. Joe Stewart. Top Spam Botnets Exposed. http://www.secureworks.com/ research/threats/topbotnets, 2008.
10. Kelly Jackson. Srizbi Botnet Sending Over 60 Billion Spams a Day. http://www.darkreading.com/security/encryption/showArticle.jhtml?articleID= 211201479, May 2008.
11. S. Lawrence and C. L. Giles. Searching the world wide web. SCIENCE, 280(5360):98-100, 1998.
12. F. Li and M.-H. Hseih. An empirical study of clustering behavior of spammers and group-based anti-spam strategies. In Proc. CEAS 2006: Third Conference on Email and Anti-Spam, 2006.
13. MAWI Working Group Traffic Archive. http://mawi.wide.ad.jp/mawi/.
14. Microsoft. Malicious Software Removal Tool. http://www.microsoft.com/ security/malwareremove/default.mspx.
15. Official Google Enterprise Blog. Spam data and trends: Q1 2009. http://googleenterprise.blogspot.com/2009/03/spam-data-and-trends-q1-2009.html, 2009.
16. A. Ramachandran, D. Dagon, and N. Feamster. Can DNS-based blacklists keep up with bots? In Proc. CEAS 2006: Third Conference on Email and Anti-Spam, 2006.
17. A. Ramachandran and N. Feamster. Understanding the network-level behavior of spammers. In Proc. ACM SIGCOMM 2006, pages 291-302, 2006.
18. A. Ramachandran, N. Feamster, and D. Dagon. Revealing botnet membership using DNSBL counter-intelligence. In 2nd Steps to Reducing Unwanted Traffic on the Internet Workshop (SRUTI), 2006.
19. Sophos. Security threat report:2009, Jan 2009.
20. H. Stern. The rise and fall of reactor mailer. In Proc. MIT Spam Conference 2009, Mar 2009.
21. The Spamhaus Project. The Policy Block List. http://www.spamhaus.org/pbl/ index.lasso.
22. H. Uose. GEMnet2: NTT's New Network Testbed for Global R&D. In TRIDENTCOM '05: Proceedings of the First International Conference on Testbeds and Research Infrastructures for the DEvelopment of NeTworks and COMmunities, pages 232-241, 2005.
23. Y. Xie, F. Yu, K. Achan, R. Panigrahy, G. Hulten, and I. Osipkov. Spamming botnets: signatures and characteristics. In Proc. ACM SIGCOMM 2008, pages 171-182, 2008.
24. M. Zalewski. the new p0f: 2.0.8. http://lcamtuf.coredump.cx/p0f.shtml, 2006.
25. L. Zhuang, J. Dunagan, D. R. Simon, H. J. Wang, and J. D. Tygar. Characterizing botnets from email spam records. In Proc. USENIX LEET 2008, pages 1-9, 2008.