Clustering spam campaigns with fuzzy hashing

Jianxing Chen, Romain Fontugne, Akira Kato, Kensuke Fukuda

研究成果: Conference contribution

5 被引用数 (Scopus)

抄録

Identifying spamming botnets is essential to defeat spammers and reduce the harm caused by spam emails. The first step to uncover these botnets is the identification of spam campaigns. Simple methods looking for common identifiers in emails, such as URL or email addresses, are inefficient due to the emergence of obfuscation techniques like URL shortening. In this paper we propose a new method based on fuzzy hashing to cluster spam with common goals into the same spam campaign. Fuzzy hashing allows us to identify emails with similar contents even though usual identifiers are obfuscated. Using the proposed method we process a three year long dataset that consists of 540 thousand spam emails. The efficiency of the proposed method is assessed by inspecting the characteristics of the top 100 campaigns found. Finally, we present typical behaviors of the uncovered spam campaigns and the corresponding botnets.

本文言語English
ホスト出版物のタイトルAsian Internet Engineering Conference, AINTEC 2014
出版社Association for Computing Machinery, Inc
ページ66-73
ページ数8
ISBN(電子版)9781450332514
DOI
出版ステータスPublished - 2014 11 26
イベント10th Asian Internet Engineering Conference, AINTEC 2014 - Chiang Mai, Thailand
継続期間: 2014 11 262014 11 28

出版物シリーズ

名前Asian Internet Engineering Conference, AINTEC 2014

Other

Other10th Asian Internet Engineering Conference, AINTEC 2014
国/地域Thailand
CityChiang Mai
Period14/11/2614/11/28

ASJC Scopus subject areas

  • コンピュータ ネットワークおよび通信
  • コンピュータ サイエンスの応用
  • ソフトウェア

フィンガープリント

「Clustering spam campaigns with fuzzy hashing」の研究トピックを掘り下げます。これらがまとまってユニークなフィンガープリントを構成します。

引用スタイル