spamHINTS
Happily It's Not The Same
spamHINTS is a research project into the use of "traffic analysis"
to detect email "spam". It will not be looking at the content of
the email, but will be looking for the distinctive patterns, in
time, in destination, and in volume that distinguish the bulk sending of spam
from legitimate email activity.
The project will build upon and extend existing (and very
successful) work on analysing traffic data from email server log files. In
particular it will determine how sFlow data from LINX, an Internet
Exchange point, can be used to pick out the tell-tale patterns of spam and
feed this information back to the originating ISPs.
Documents
Current funding proposal
DRAFT Best Practice document on sending reports of email abuse that are based on traffic data
With assistance from:
LINX (agreed at LINX 51 member meeting)
Intel Research
... and more to come
Bibliography
Richard Clayton. Anonymity and Traceability in Cyberspace.
PhD Thesis, University of Cambridge, August 2005.
http://www.cl.cam.ac.uk/~rnc1/thesis.pdf
Richard Clayton. Stopping Outgoing Spam by Examining Incoming Server Logs.
Second Conference on Email and Anti-Spam (CEAS 2005), Stanford CA, USA,
July 21-22 2005.
http://www.cl.cam.ac.uk/~rnc1/incoming.pdf
Andrei Serjantov and Richard Clayton. Modelling Incentives for Email Blocking Strategies. Fourth
Annual Workshop on Economics and Information Security, WEIS05, Boston MA, USA,
June 2-3 2005.
http://www.cl.cam.ac.uk/~rnc1/emailblocking.pdf
Richard Clayton. Stopping Spam by Extrusion Detection. First Conference on Email and
Anti-Spam (CEAS 2004), Mountain View CA, USA, July 30-31 2004.
http://www.cl.cam.ac.uk/~rnc1/extrusion.pdf
Ben Laurie and Richard Clayton. Proof-of-Work Proves Not to Work.
Third Annual Workshop on Economics and Information Security, WEIS04,
Minneapolis MN, May 13-14 2004.
http://www.cl.cam.ac.uk/~rnc1/proofwork2.pdf
last modified 21 FEB 2006 -- http://www.spamHINTS.org
| 