NDLI: Towards the effective temporal association mining of spam blacklists

Please wait, while we are loading the content...

Automatic authentication of email servers and personal computers independent of the active participation of server administrators or personal computer users

A social-spam detection framework

Using classifier cascades for scalable e-mail classification

Filtering harmful sentences based on three-word co-occurrence

Towards the effective temporal association mining of spam blacklists

Spam detection using web page content: a new battleground

Phi.sh/\$oCiaL: the phishing landscape through short URLs

A rule-based system for end-user e-mail annotations

Lexical URL analysis for discriminating phishing and legitimate websites

Blocking spam by separating end-user machines from legitimate mail server machines

Clustering for semi-supervised spam filtering

A study of feature subset evaluators and feature subset searching methods for phishing classification

Trusted data fusion by using cellular automata in wireless sensor networks

Link spamming Wikipedia for profit

A strategic analysis of spam botnets operations

Identify fixed-path phishing attack by STC

Evaluating a semisupervised approach to phishing url identification in a realistic scenario

A security pass for messages: message keys

Dynamic content-based cloud data integration system with privacy and cost concern

Storage cost of spam 2.0 in a web discussion forum

Spam or ham?: characterizing and detecting fraudulent "not spam" reports in web mail systems

Empirical comparison of IP reputation databases

Towards the effective temporal association mining of spam blacklists

Content Provider	ACM Digital Library
Author	Lee, Insup West, Andrew G.
Abstract	IP blacklists are a well-regarded anti-spam mechanism that capture global spamming patterns. These properties make such lists a practical ground-truth by which to study email spam behaviors. Observing one blacklist for nearly a year-and-a-half, we collected data on roughly half a billion listing events. In this paper, that data serves two purposes. First, we conduct a measurement study on the dynamics of blacklists and email spam at-large. The magnitude/duration of the data enables scrutiny of long-term trends, at scale. Further, these statistics help parameterize our second task: the mining of blacklist history for temporal association rules. That is, we search for IP addresses with correlated histories. Strong correlations would suggest group members are not independent entities and likely share botnet membership. Unfortunately, we find that statistically significant groupings are rare. This result is reinforced when rules are evaluated in terms of their ability to: (1) identify shared botnet members, using ground-truth from botnet infiltrations and sinkholes, and (2) predict future blacklisting events. In both cases, performance improvements over a control classifier are nominal. This outcome forces us to re-examine the appropriateness of blacklist data for this task, and suggest refinements to our mining model that may allow it to better capture the dynamics by which botnets operate.
Starting Page	73
Ending Page	82
Page Count	10
File Format	PDF
ISBN	9781450307888
DOI	10.1145/2030376.2030385
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2011-09-01
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Ip blacklists Temporal data mining Measurement study Association rule learning Botnet detection Email spam
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Towards the Effective Temporal Association Mining of Spam Blacklists ∗

Towards the effective temporal association mining of spam blacklists.

A Comprehensive Study of Email Spam Botnet Detection

Benchmarking IP blacklists for financial botnet detection

Spamming Botnets: Signatures and Characteristics (2008)

Spamming botnets: signatures and characteristics (2008)

Analytical Study of Association Rule Mining Methods in Data Mining

Fast and effective spam sender detection with granular SVM on highly imbalanced server behavior data (2006)

The application of decision tree in Chinese email classification

Towards the effective temporal association mining of spam blacklists

Similar Documents

Towards the Effective Temporal Association Mining of Spam Blacklists ∗

Towards the effective temporal association mining of spam blacklists.

A Comprehensive Study of Email Spam Botnet Detection

Benchmarking IP blacklists for financial botnet detection

Spamming Botnets: Signatures and Characteristics (2008)

Spamming botnets: signatures and characteristics (2008)

Analytical Study of Association Rule Mining Methods in Data Mining

Fast and effective spam sender detection with granular SVM on highly imbalanced server behavior data (2006)

The application of decision tree in Chinese email classification

Towards the effective temporal association mining of spam blacklists