A novel method to detect junk mail traffic

摘要：

This paper proposes a junk mail or spam detection technique called ASCI (Abnormal SMTP Command Identification), which allows network administrators to cut off some spam traffic on email delivery. Our insight is that spamware usually generate special or abnormal packets deviating SMTP protocol for high throughout, while good users never do it. This characterization can be used to detect spam. ASCI is applied to two different volumes of email traffic data captured respectively near an email gateway and at a country-edged core router of a large commercial Internet Service Provider in China. Experimental results indicate that the method is effective and practical, with at least 11.4％ reduction of email traffic for unwanted traffic.

关键词： junk mail SMTP unwanted traffic

作者: Qiang Li Baoliang Mu

作者单位: Shenyang Normal university Shenyang , China

会议类型: 国际会议

会议名称: 2009 Ninth International Conference on Hybrid Intelligent Systems(第九届混合智能系统国际会议 HIS 2009)

会议地点: 沈阳

会议语种:英文

页码: 1-5

在线出版日期: 2009-08-12（万方平台首次上网日期，不代表论文的发表时间）