Spam, Phishing, and Online Scams: A View from the Network-Level

Google Tech Talks
June, 13 2008

ABSTRACT

The Internet is overrun with spam: Recent estimates suggest that spam
constitutes about 95% of all email traffic. Beyond simply being a
nuisance, spam exhausts network resources and can also serve as a
vector for other types of attacks, including phishing attacks and
online scams. Conventional approaches to stopping these types of
attacks typically rely on a combination of the reputation of a
sender's IP address and the contents of the message. Unfortunately,
these features are brittle. Spammers can easily change the IP
addresses from which they send spam and the content that they use as
the "cover medium" for the email message itself. In this talk, I will
describe a new, complementary approach to stopping unwanted email
traffic on the Internet: Rather than classifying spam based on either
the content of the message or the identity of the sender, we classify
email messages based on how the spam is being sent and the properties
of the spamming infrastructure. I will first summarize the highlights
of a 13-month study of the network-level behavior of spammers using
data from a large spam trap. I will then describe a new approach to
spammer classification called "behavioral blacklisting" and present a
detailed study of network-level features that can be used to identify
spammers. Often these features can classify a spammer on the first
packet received from that sender, without even receiving the message.
I will conclude by describing our plans to incorporate these
algorithms into a next-generation sender reputation system, as well as
our ongoing study of the online scam hosting infrastructure, whose
properties may also ultimately prove useful for identifying unwanted
traffic.

This talk includes joint work with Anirudh Ramachandran, Nadeem Syed,
Maria Konte, Santosh Vempala, Jaeyeon Jung, and Alex Gray.


Speaker: Nick Feamster
Nick Feamster is an assistant professor in the College of Computing at Georgia Tech. He received his Ph.D. in Computer science from MIT in 2005, and his S.B. and M.Eng. degrees in Electrical Engineering and Computer Science from MIT in 2000 and 2001, respectively. His research focuses on many aspects of computer networking and networked systems, including the design, measurement, and analysis of network routing protocols, network operations and security, and anonymous communication systems. His honors include a Sloan Research Fellowship, the NSF CAREER award, the IBM Faculty Fellowship, and award papers at SIGCOMM 2006 (network-level behavior of spammers), the NSDI 2005 conference (fault detection in router configuration), Usenix Security 2002 (circumventing web censorship using Infranet), and Usenix Security 2001 (web cookie analysis).

Category:

People & Blogs

Tags:

• google
• techtalks
• techtalk
• engedu
• talk
• talks
• googletechtalks
• education

[TheBuzzzbizzz]

Gawel Kaszkowski is a major SPAMMER and VIRUS distributor - BEWARE

[dexterace02]

who the hell will watch this for an hour?

[TheKillerman170]

haven't been scammed yet? go over to scam.us.st and download the virus.exe now!

[TheBennyoo]

fuck you google who the fuck would watch this pos oh noo spammmmm how do i filter spam yall are faggots go to hell i dont need a powerpoint to tell me what spam is

[CONKER17]

@Smoothiez01 people who are partners with youtube can make videos longer then 10 mins

[chocobiscuit5y468275]

1:06:18!

[IPAWNMYQUEENS]

and when i ever find out that you or any of the other guys i hate get to see the sae content in watching on the net in reallly gonny f+ck you up so hard you wont believe in your wildest nightnares

[IPAWNMYQUEENS]

i hate u so uch

[capricornGTR]

Easy rule. If you get something in your mail and it involves money it's spam/scam. temp IP's Their not gone it's "piggy backing". And no it's not boring it's called education.

[WTFranky1]

OMFG tl;dw like srsly cant u make this thing shorter o.O