EEMCS

Home > Publications
Home University of Twente
Education
Research
Prospective Students
Jobs
Publications
Intranet (internal)
 
 Nederlands
 Contact
 Search
 Organisation

EEMCS EPrints Service


20379 Internet Bad Neighborhoods: the Spam Case
Home Policy Brochure Browse Search User Area Contact Help

Moreira Moura, G.C. and Sadre, R. and Pras, A. (2011) Internet Bad Neighborhoods: the Spam Case. In: 7th International Conference on Network and Services Management (CNSM 2011), 24-28 Oct 2011, Paris, France. pp. 1-8. IEEE Communications Society. ISBN 978-1-4577-1588-4

Full text available as:

PDF

262 Kb
Open Access



Official URL: http://ieeexplore.ieee.org/search/srchabstract.jsp?arnumber=6103945

Exported to Metis

Abstract

A significant part of current attacks on the Internet comes from compromised hosts that, usually, take part in botnets. Even though bots themselves can be distributed all over the world, there is evidence that most of the malicious hosts are, in fact, concentrated in small fractions of the IP address space, on certain networks. Based on that, the Bad Neighborhood concept was introduced. The general idea of Bad Neighborhoods is to rate a subnetwork by the number of malicious hosts that have been observed in that subnetwork. Even though Bad Neighborhoods were successfully employed in mail filtering, the very concept was not investigated in further details. Therefore, in this work we provide a closer look on it, by proposing four definitions for spam-based Bad Neighborhoods that take into account the way spammers operate. We apply the definitions to real world data sets and show that they provide valuable insight into the behavior of spammers and the networks hosting them. Among our findings, we show that 10% of the Bad Neighborhoods are responsible for the majority of spam.

Item Type:Conference or Workshop Paper (Full Paper, Talk)
Research Group:EWI-DACS: Design and Analysis of Communication Systems
Research Program:CTIT-DSN: Dependable Systems and Networks
Research Project:UNIVERSELF: Universal Self-management
ID Code:20379
Status:Published
Deposited On:10 August 2011
Refereed:Yes
International:Yes
More Information:statisticsmetis

Export this item as:

To correct this item please ask your editor

Repository Staff Only: edit this item