Can Network Characteristics Detect Spam Effectively in a Stand-Alone Enterprise?
Autor: | Tu Ouyang, Michael Rabinovich, Soumya Ray, Mark Allman |
---|---|
Rok vydání: | 2011 |
Předmět: | |
Zdroj: | Passive and Active Measurement ISBN: 9783642192593 PAM |
DOI: | 10.1007/978-3-642-19260-9_10 |
Popis: | Previous work has shown that the network dynamics experienced by both the initial packet and an entire connection carrying an email can be leveraged to classify the email as spam or ham. In the case of packet properties, the prior work has investigated their efficacy based on models of traffic collected from around the world. In this paper, we first revisit the techniques when only using information from a single enterprise's vantage point and find packet properties to be less useful. We also show that adding flow characteristics to a model of packet features adds modest discriminating power, and some flow features' information is captured by packet features. |
Databáze: | OpenAIRE |
Externí odkaz: |