Router-level spam filtering using TCP fingerprints: Architecture and measurement-based evaluation

6th Conference on Email and Anti-Spam, CEAS 2009

Volumn , Issue , 2009, Pages

  Esquivel, Holly ^a   Mori, Tatsuya ^b   Akella, Aditya ^a  

^a UNIVERSITY OF WISCONSIN MADISON   (United States)

^b NTT CORPORATION   (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER ARCHITECTURE; NETWORK ARCHITECTURE; SPAMMING; TELECOMMUNICATION NETWORKS;

ANTI-SPAM FILTERING; ARCHITECTURAL ENHANCEMENT; CONTENT FILTERING; FALSE POSITIVE; FALSE POSITIVE RATES; MEASUREMENT-BASED; NETWORK LOCATION; SIMPLE HEURISTICS;

INTERNET;

EID: 84904823170     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. Barracuda spam firewall. http://www.barracudanetworks.com/ns/products/ spam-overview.php.
2. Ettercap. http://ettercap.sourceforge.net/.
3. Fingerprint Sharing Alliance. http://www.arbornetworks.com/en/ fingerprint-sharing-alliance.html.
4. IPPersonality. http://ippersonality.sourceforge.net/.
5. Milter. http://www.milter.org/.
6. Postfix. http://www.postfix.org/.
7. Sendmail. http://www.sendmail.org/.
8. SpamAssassin. http://spamassassin.apache.org/.
9. The Siphon Project. http://siphon.datanerds.net/.
10. The Spamhaus Project. http://www.spamhaus.org/.
11. B. Agrawal, N. Kumar, and M. Molle. Controlling spam emails at the routers. Communications, 2005. ICC 2005. 2005 IEEE International Conference on, 3:1588-1592 Vol. 3, 16-20 May 2005.
12. R. Beverly and K. Sollins. Exploiting transport-level characteristics of spam. In CEAS, 2008.
13. P. Calais, D. Pires, D. Guedes, W. M. Jr., C. Hoepers, and K. Steding-Jessen. A campaign-based characterization of spamming strategies. In CEAS, 2008.
14. F. Li and M.-H. Hseih. An empirical study of clustering behavior of spammers and group-based anti-spam strategies. In CEAS, 2006.
15. T. Mori, H. Esquivel, A. Akella, Z. M. Mao, Y. Xie, and F. Yu. On the effectiveness of pre-acceptance spam filtering. University of Wisconsin Madison Tech Report TR1650, Mar. 2009.
16. T. Mori, H. Esquivel, A. Akella, A. Shimoda, and S. Goto. Understanding the world.s worst spamming botnet. University of Wisconsin Madison Tech Report TR1660, June 2009.
17. A. Ramachandran and N. Feamster. Understanding the network-level behavior of spammers. In SIGCOMM '06: Proceedings of the 2006 conference on Applications, technologies, architectures, and protocols for computer communications, pages 291-302, New York, NY, USA, 2006. ACM.
18. A. Schwartz. amavisd-new and p0f. http://www.amazon.com/gp/blog/post/ PLNK3F6QB0NKZ1DZT, 2006.
19. H. Stern. The rise and fall of reactor mailer. In Proc. MIT Spam Conference 2009, Mar 2009.
20. D. Webber. Spamassassin p0f plugin catches bot spam. http://advosys.ca/ viewpoints/2007/07/spamassassin-p0fplugin-catches-bot-spam/, 2007.
21. M. Zalewski. the new p0f: 2.0.8. http://lcamtuf.coredump.cx/p0f.shtml, 2006.