Enhancing Email Address Privacy on Anti -SPAM by Dou Wang and Ying Chen School of Computer Science University of Windsor October 2007 1
Contents Ø Introduction Ø Related Works Ø Our Proposed Method Ø Advantages Ø Conclusion 2
Introduction Ø SPAM § § Consume recipients’ time and work Consume resources of Mail Transfer Agents (MTAs) Deliver with virus, spy-ware and/or ad-ware § Contain phishing content to break the users’ privacy § 3
Introduction Ø Jupiter Research estimates the average e-mail user will receive more than 3, 900 spam mails per year by 2007, up from just 40 in 1999, and Ferris Research estimates spam costs U. S. companies 10 billion in 2003 and a user spends on the average 4 seconds to process a SPAM mail. [1] 4
![Related works Ø Anti-spam Solutions Category § Filtering [2] v v v Origin-based filtering](https://present5.com/presentation/cd6a04937514293d2dcd6489206268d8/image-5.jpg "Related works Ø Anti-spam Solutions Category § Filtering [2] v v v Origin-based filtering")
Related works Ø Anti-spam Solutions Category § Filtering [2] v v v Origin-based filtering Content-based filtering Traffic-based filtering Policy-Control Human-interactive Completely Automatic Public Turing Test to tell Computer and Humans Apart (CAPTCHA) [3] § Address-hiding § § 5
Related works Ø Filtering Origin-based filter checks sender information with certain keywords, string styles and compares with recipients’ whitelist and blacklist. § Content-based filter analyzes the body content of the email message by complex algorithms and maintain the knowledge base to realize self-learning. § Traffic-based filter examines the network traffic on the email server and gather the server logging information to determine the spam probability. § 6
Related works User interface of SOPHOS spam filter about quarantine and whitelist and blacklist. 7
Related works Ø Policy-Control Non-technical policy restriction. More and more governments defined regulations and acts to restrict spammers performing the spam spreading. § Technical policy restriction. Change the protocol regulation can restrict spam message delivery for the technology that the spammers currently are using. § 8
Related works Ø Human-Interactive § Completely Automatic Public Turing Test to Tell Computer and Humans Apart (CAPTCHA) Ttriggered by the recipient MTA to send a verification string back to sender to verify the sender is a real human. Samples of CAPTCHA string 9
Related works Ø Address-hiding Hide the unique character in the email address, the symbol @ userid@domain. com userid at domain dot com 10
Our Proposed Method Make email addresses on the Internet be unsearchable by scanning program. Ø Encrypt both sender and recipients email addresses to prevent hijacking during the transferring. Ø 11
Our Proposed Method Ø How the spammers get bulk email addresses Buy the millions of email addresses from some organizations. § Scan the Internet addresses from the Internet web pages or some web pages that contain email addresses. § 12
Our Proposed Method Ø Make email addresses on the Internet be unreachable by scanning program username@company. com <div> username@company. ca</div></br> <img src="/imgs/emailaddress/username. gif" /> 13
Our Proposed Method Ø Encrypt both sender and recipients email addresses to prevent hijacking during the transferring The MTA randomly generates a Message. ID and assign it to the email which arrived to the MTA. § Before sending out the email message to destination MTA, sender relay host sends a SMTP socket with Message. ID to recipient MTA to ask for returning a key generated by using the § Message. ID on the recipient server. 14
Our Proposed Method Ø Encrypt both sender and recipients email addresses to prevent hijacking during the transferring (continue) § Sender MTA uses this key to encrypt all the email addresses in the message (Send. To, Copy. To and From, etc) to generate the encrypted code for the part of email address before “@” symbol. userid@gmail. com § 1 Qerg 4 m. F 7@gmail. com After the message arrived the recipient MTA, the host uses the original Message. ID to decrypt the email addresses in the email message and assign a new Message. ID for delivery. 15
Our Proposed Method Diagram of encoding email addresses 16
Advantages Reduces the SPAM from the root. Ø Compatibility and maintain the standard. Ø Low cost of network traffic. Ø Easy to implement. Ø Ø Gain the initiative in the anti-spam combat. 17
Conclusions The first approach convert posted email addresses to graphical pictures rather than expose the character strings to prevent spammers use scanning program to search them out. Ø The second approach use an encryption method to secure the email addresses to avoid hijacking during the email transferring. Ø 18
? 19
![References Ø [1] Ming-Wei Wu; Yennun Huang; Shyue-Kung Lu; Ing-Yi Chen; Sy-Yen Kuo, “A](https://present5.com/presentation/cd6a04937514293d2dcd6489206268d8/image-20.jpg "References Ø [1] Ming-Wei Wu; Yennun Huang; Shyue-Kung Lu; Ing-Yi Chen; Sy-Yen Kuo, “A")
References Ø [1] Ming-Wei Wu; Yennun Huang; Shyue-Kung Lu; Ing-Yi Chen; Sy-Yen Kuo, “A Multi-faceted approach towards spam-resistible mail”, Dependable Computing, 2005. Proceeding, 11 th Pacific Rim International Symposium, Page(s): 9 pp, Dec, 2005. Ø [2] Yanhui Guo; Yaolong Zhang; Jianyi Liu; Cong Wang, “Research on the Comprehensive Anti-Spam Filter”, Industrial Informatics, 2006 IEEE International Conference, Page(s) 1069 -1074, Aug, 2006 Ø [3] Sajad Shirali-Shahreza; Ali Movaghar, “A New Anti-Spam Protocol Using CAPTCHA”, Networking, Sensing and Control, 2007 IEEE International Conference, Page(s) 234 -238, April, 2007 20
Скачать презентацию Enhancing Email Address Privacy on Anti -SPAM by
cd6a04937514293d2dcd6489206268d8.ppt