Analyzing network and content characteristics of spim using honeypots

3rd Workshop on Steps to Reducing Unwanted Traffic on the Internet, SRUTI 2007

Volumn , Issue , 2007, Pages

  Trivedi, Aarjav J ^a   Judge, Paul Q ^a   Krasser, Sven ^a  

^a Secure Computing Corporation   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BOTNET; ELECTRONIC MAIL; MESSAGE PASSING; NETWORK LAYERS; NETWORK SECURITY;

BLOCKING RATES; COMMAND AND CONTROL; CONTENT FILTERING; INSTANT MESSAGING; NETWORK CHARACTERISTICS; PROTOCOL DECODING; PROTOCOL INFORMATION; SPAM TRAFFIC;

INTERNET PROTOCOLS;

EID: 85035794100     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (24)

1. MacDonald, Neil. Recommendations for Infrastructure Protection, 2006. http://mediaproducts.gartner.com/gc/webletter/qwest/issue4/gartner1.htm
2. InformationWeek. New IM Phishing Attacks Unleashed on Yahoo. Nov. 2005 http://www.informationweek.com/story/showArticle.jhtml?articleI D=173601765
3. Graham, Paul. A Plan for Spam. August 2002. http://www.paulgraham.com/spam.html
4. Graham, Paul. Filters vs. Blacklists September 2002. http://www.paulgraham.com/falsepositives.html
5. Zhijun, Liu., Weili, Lin., Na, Li., Lee, D. Detecting and filtering instant messaging spam - a global and personalized approach. 1st IEEE ICNP Workshop on Secure Network Protocols, 2005. pp. 1 -24
6. Krasser, Grizzard, Owen, Levine. The Use of Honeynets to Increase Computer Network Security and User Awareness http://www.juliangrizzard.com/pubs/2005_krasser_jse.pdf
7. Lance Spitzner. “Honeyd,” Honeypots-Tracking Hackers, Addison Wesley, 2002, pp. 141-166.
8. The Honeynet Project, “Know Your Enemy: Sebek,” http://honeynet.org/papers/sebek.pdf.
9. N, Provos. A virtual honeypot framework. Proceedings of the 13th USENIX Symposium. 2004. pp. 1-14
10. Andreolini., Bulgarelli, Colajanni, Mazzoni. HoneySpam: Honeypots fighting spam at the source. Proceedings of the International Workshop on Steps to Reducing Unwanted Traffic on the Internet (SRUTI'05). July 2005. pp. 77-83
11. Schryen, G. An e-mail honeypot addressing spammers' behavior in collecting and applying addresses. Proceedings from the Sixth Annual IEEE Systems, Man and Cybernetics (SMC) Information Assurance Workshop, June 2005. pp. 37-41
12. P Saint-Andre, Ed. RFC 3921: Extensible Messaging and Presence Protocol (XMPP): Instant Messaging and Presence, 2004
13. Yahoo Messenger Protocol v-9. http://libyahoo2.sourceforge.net/ymsg-9.txt
14. MSN Messenger Protocol. http://www.hypothetic.org/docs/msn/
15. Fritzler, Adam. Unofficial AIM MSN Protocol Specification. http://www.oilcan.org/oscar/
16. libyahoo2 - A C library for Yahoo Messenger. http://libyahoo2.sourceforge.net/
17. libmsn a C++ library for Microsoft's MSN Messenger service. http://libmsn.bdash.net.nz/
18. libpurple - Core GAIM library. http://developer.pidgin.im/wiki/WhatIsLibpurple
19. Gomes, LH., Cazita, C., Almeida, JM., Almeida, V., Meira, W. Characterizing a spam traffic. Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, 2004, pp. 356-369
20. Shannon, C.E. Prediction and Entropy of Printed English. September 1951. Bell Systems Technical Journal, 30. pp. 50-64.
21. TrustedSource, http://trustedsource.org
22. Mannan, Mohammad. and van Oorschot, Paul. Secure public Instant Messaging: A survey. Proceedings of Privacy, Security and Trust, 2004. http://citeseer.ist.psu.edu/mannan04secure.html
23. Mannan, Mohammad. and van Oorschot, Paul. A Protocol for Secure Public Instant Messaging. Financial Cryptography 2006. pp. 20-35
24. Mannan, Mohammad. and van Oorschot, Paul. A Proceedings of the ACM workshop on Rapid malcode, 2005. pp 2-11.