Anti Phishing & Spam -- by lynn
Spam
Anti Spam and How White-lists Black-lists Heuristics –Bayes –Neural Networks Static technique –keyword checking Sender Authentication
Anti-spam Tools 1. SurfControl Filter for SMTP 2. Symantec Brightmail Anti-Spam 3. Symantect Mail Security for SMTP 4. Kaspersky Anti-Spam, referred 5. Borderware MXtreme Mail Filewall 6. Ikarus mySpamWall 7. SpamAssassin 8. CRM 114 (Controllable Regex Mutilator) 9. Bogofilter
product method White List******** Black List******** Bayes***** Neural Networks *** Static techniques ** * ****
As we can see … most of these products use White List & Black List. Static techniques are also popular among them About half of them use Bayes or Neural Networks as Heuristics
How they work? The spam sample was from SpamAssassin – 1397 Spam messages –1400 ham messages
SpamAssassin Low(2.64) –Bayes disabled –Network tests disabled SpamAssassin standard (2.64) –Bayes disabled –Network tests enabled SpamAssasin Bayes(2.64) –Bayes enable –Network tests enabled SpamAssassin (3.0) –Bayes enabled –Network tests enabled
Spam Phishing phishing usually initiated through “ junk ” –Scam Anti-spam and Anti-phishing tools use similar methods –Black & White List –Community ratings –Heuristics methods –Authentication
Anti-Phishing and How CallingID Toolbar Cloudmark Anti-Fraud Toolbar EarthLink Toolbar eBay Toolbar Firefox 2 GeoTrust TrustWatch Toolbar Microsoft Phishing Filter in Windows Internet Explorer 7 Netcraft Anti-Phishing Toolbar Netscape Browser 8.1 SpoofGuard
Black List communit y ratings HeuristicsAuthent ication CallingID Toolbar *** Cloudmark ** EarthLink Toolbar **** eBay Toolbar ** Firefox 2 ** GeoTrust * Phishing Filter of IE7 ** Netcraft ** Netscape Browser 8.1 * SpoofGuard *
Conclusion … Black & White List : most popular –BogofilterBogofilter Heuristic methods : anti-phishing –SpoofGuardSpoofGuard Static technique : anti-spam –keyword checking
Thank you ~ Thank you ~