|
| Recent
Articles |
Redirecting Google Blog Search
One of the biggest threats to Google's dominance will doubtfully be a competing search engine, at least for the time being... No, if you had to narrow it down, the biggest threat will probably come in the form of search...
What You Should Know About Trackback Spam
Trackback facilitates communication between blogs. When a blogger writes a new entry whether to comment on or refer to an entry found at another blog, the commenting blogger can notify the other blog with a Trackback ping. The receiving blog will display summaries and links...
Yahoo! Loses Anti-Spam Leader To Startup
This might not be the happiest year ending for Yahoo!. Many of its executives have quit during the past year. Tim Converse who leads the anti-spam efforts as an engineering manager has called it quits and...
Taking The Spam Fight To The Gateway
The barbarians are at the gate, and only need a brief window of opportunity to invade systems, capture credentials, and report back to their masters to wreak havoc across a swath of userland. Those threats arrive regularly in massive spam onslaughts, and continue...
Spam Jams Email
What does your email inbox look like? Is it full of spam or are the filters doing their job? A report from an online security firm IronPort Systems said 62 billion spam messages a day jammed US email systems in...
Strategies For Preventing Comment Spam
Bloggers are painfully aware of website owners who try to improve their websites rank by adding links to blogs. There are several strategies for combating this problem. The first and most obvious method is to avoid...
How Spammers Get Your Email Address
Are you wondering how spammers get your email address? There are a few tricks they have for getting your address and once you see them you will see how important it is to protect your 'real' address and only give it to family, friends, and work contacts. Is your...
|
|
|
02.16.07
Anti Spam Tips From The Department Of Energy
 By
Sakuraba
Anti-spam techniques The US Department of Energy Computer Incident Advisory Committee (CIAC) has provided specific countermeasures against electronic mail spamming.
Some popular methods for filtering and refusing spam include e-mail filtering based on the content of the e-mail, DNS-based blackhole lists (DNSBL), greylisting, spamtraps, enforcing technical requirements, checksumming systems to detect bulk email, and by putting some sort of cost on the sender via a Proof-of-work system or a micropayment. Each method has strengths and weaknesses and each is controversial due to its weaknesses.
Detecting spam based on the content of the e-mail, either by detecting keywords such as "viagra" or by statistical means are very popular. They can be very accurate when they are correctly tuned to the types of legitimate email that an individual gets, but they can also make mistakes such as detecting the keyword "cialis" in the word "specialist". The content also doesn't determine whether the email was either unsolicited or bulk, the two key features of spam. So, if a friend sends you a joke that mentions "viagra", content filters can easily mark it as being spam even though it is both solicited and not bulk.
The most popular DNSBLs are lists of IP addresses of known spammers, open relays, zombie spammers etc.
Spamtraps are often email addresses that were never valid or have been invalid for a long time that are used to collect spam. An effective spamtrap is not announced and is only found by dictionary attacks or by pulling addresses off hidden webpages. For a spamtrap to remain effective the address must never be given to anyone. Some black lists, such as spamcop, use spamtraps to catch spammers and blacklist them.
Enforcing technical requirements of the Simple Mail Transfer Protocol (SMTP) can be used to block mail coming from systems that are not compliant with the RFC standards. A lot of spammers use poorly written software or are unable to comply with the standards because they do not have legitimate control of the computer sending spam (zombie computer). So by setting restrictions on the mail transfer agent (MTA) a mail administrator can reduce spam significantly. In many situations, simply requiring a valid fully qualified domain name (FQDN) in the SMTP's EHLO (extended hello) statement is enough to block 25% of incoming spam.
Obfuscating message content Many spam-filtering techniques work by searching for patterns in the headers or bodies of messages. For instance, a user may decide that all e-mail he or she receives with the word "Viagra" in the subject line is spam, and instruct her mail program to automatically delete all such messages. To defeat such filters, the spammer may intentionally misspell commonly-filtered words or insert other characters, as in the following examples:
Continue reading this article.
About the Author:
For more infomation please visit http://antispam.awardspace.com or http://antispam.php0h.com/ or http://en.wikipedia.org
|
