NDLI: MET: an experimental system for Malicious Email Tracking

Please wait, while we are loading the content...

MET: an experimental system for Malicious Email Tracking

Small worlds in security systems: an analysis of the PGP certificate graph

Anomaly intrusion detection in dynamic execution environments

An approach to usable security based on event monitoring and visualization

Assurance in life/nation critical endeavors a panel

Capacity is the wrong paradigm

Predators: good will mobile codes combat against computer viruses

Breaking the barriers: high performance security for high performance computing

Empowering mobile code using expressive security policies

Moving from the design of usable security technologies to the design of useful secure applications

Biometrics or ... biohazards?

A practical approach to solve Secure Multi-party Computation problems

An empirical analysis of NATE: Network Analysis of Anomalous Traffic Events

From privacy promises to privacy management: a new approach for enforcing privacy throughout an enterprise

The source is the proof

An evolutionary approach to cyber security

Guarding the next Internet frontier: countering denial of information attacks

Assuring critical systems

MET: an experimental system for Malicious Email Tracking

Content Provider	ACM Digital Library
Author	Hershkop, Shlomo Eskin, Eleazar Bhattacharyya, Manasi
Abstract	Despite the use of state of the art methods to protect against malicious programs, they continue to threaten and damage computer systems around the world. In this paper we present MET, the Malicious Email Tracking system, designed to automatically report statistics on the flow behavior of malicious software delivered via email attachments both at a local and global level. MET can help reduce the spread of malicious software worldwide, especially self-replicating viruses, as well as provide further insight toward minimizing damage caused by malicious programs in the future. In addition, the system can help system administrators detect all of the points of entry of a malicious email into a network. The core of MET's operation is a database of statistics about the trajectory of email attachments in and out of a network system, and the culling together of these statistics across networks to present a global view of the spread of the malicious software. From a statistical perspective sampling only a small amount of traffic (for example, .1 %) of a very large email stream is sufficient to detect suspicious or otherwise new email viruses that may be undetected by standard signature-based scanners. Therefore, relatively few MET installations would be necessary to gather sufficient data in order to provide broad protection services. Small scale simulations are presented to demonstrate MET in operation and suggests how detection of new virus propagations via flow statistics can be automated.
Starting Page	3
Ending Page	10
Page Count	8
File Format	PDF
ISBN	158113598X
DOI	10.1145/844102.844104
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2002-09-23
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Email attachment Email tracking Virus detection Anti-virus
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in