Network-level characteristics of spamming: An empirical analysis

Abstract

Abstract-Has the behavior of spammers changed over the last few years? To answer this question, we conduct a study from three recent data sources. Specifically, we focus on the following broad questions: (a) how are email addresses harvested, (b) where is spam coming from, and (c) how does spam evolve over time. First, we discuss whether spammers still use email harvesting : 34% of the honeypot accounts we publicised received spam after 72 days on average. Interestingly, we find that simple email address obfuscation is quite effective against harvesting. Second, we identify significant skew in the spatial distribution of the origin of spam in both the IP-level and AS-level of granularity. We find that 20% of the active IPs are responsible for 80% of the total volume of spam and that 10% of the spamming ASes are responsible for the 90% of the volume. Finally, we study the temporal characteristics of the spamming IPs and find that spam activity has spread to new /8 subnetworks since 2006. Considering these spatio-temporal trends, the future of anti-spam is mixed: the current skewed spatial distribution of spam sources could be helpful in filtering spam, but the fact that spam sources are spreading in the IP space is a worrisome sign.

Do Reputational Sanctions Deter Negligence in Information Security Management? A Field Quasi‐Experiment

“…There are two types of spammers: those who knowingly abuse their accounts and send junk emails instead of using legitimate advertising methods and those whose accounts have been unknowingly hacked by cybercriminals, becoming an unwitting component of botnets or compromised email accounts. The latter type accounts for approximately 95% of the total spam volume (Kokkodis et al 2011). More than merely a nuisance, spam is costly for business operations, directly affecting the company's bottom line.…”

“…The latter type accounts for approximately 95% of the total spam volume (Kokkodis et al. 2011). More than merely a nuisance, spam is costly for business operations, directly affecting the company's bottom line.…”