[PDF] - Sc ope of t he Pr obl e m Spa m About 60% of a l l PDF Document

SLIDE 1

1 Spa m

Edwa r d W . Fe l t e n De pt .

f

Com put e r Sc i e nc e Pr i nc e t

n

Uni ve r s i t y

Sc

pe
f

t he Pr

bl

e m

About

60%

f

a l l e m a i l i s s pam

– M uc h i s f r a udul e nt – M uc h i s i na ppr

pr

i a t e f

r

ki ds

5%
f

U. S. ne t us e r s have bought s

m e

t hi ng f r

m

a s pam m e r

– Bi l l i

ns
f

dol l a r s

f

s a l e s – Spa m m i ng pa ys

W i

l l t al k a bout e m a i l ; but a f f e c t s

t

he r c

m m uni

ca t i

n

t e c hnol

gi

e s al s

An

Em a i l M e s s a ge

Fr

m :

f el t e n@ c s . pr i nc e t

n.

e du To: l a z

ws

ka @ c s . wa s hi ngt

n.

e du Subj e c t : m a i l f

r

ge r y Da t e : Nove m be r 18, 2004 Ac t ua l l y, a nybody c a n m a ke a m e s s a ge l i ke t hi s . The r e ’ s no i nhe r e nt a ut he nt i c a t i

n
f

t he r e c e i ve r ’ s a ddr e s s , a nd no gua r a nt e e t ha t t he m e s s a ge c a m e f r

m

a ny pa r t i c ul a r pl a c e . For ge r y i s e a s y.

Em a i l Tr a ns por t

s e nde r Se nde r ’ s s e r ve r Re c e i ve r ’ s s e r ve r SM TP SM TP r e c e i ve r POP/ I M AP Com pl i c a t i

ns

: f

r

wa r di ng, m a i l i ng l i s t s , aut

r

e s ponde r s , e t c .

W ha t i s Spa m ?

( 1) Em a i l t ha t t he r e c i pi e nt doe s n’ t wa nt . Pr

bl

e m s :

onl

y de f i ne d a f t e r t he f a c t

ba

n r a i s e s Fi r s t Am e ndm e nt i s s ue s ( 2) Uns

l

i c i t e d e m a i l . Pr

bl

e m : l

t

s

f

uns

l

i c i t e d e m a i l i s de s i r e d

W ha t i s Spa m ?

( 3) Uns

l

i c i t e d c

m m e

r c i a l e m a i l . But wha t e xa c t l y does “ uns

l

i c i t e d” m e a n?

SLIDE 2

2 Fr e e Spe e c h I s s ue s

Law

s

m e

t i m e s a l l

ws

s pe e c h, e ve n whe n t he l i s t e ne r doe s n’ t wa nt t

he

a r i t .

Com m e

r c i a l s pe e c h l e s s pr

t

e c t e d t ha n pol i t i c a l s pe e c h.

At

t he ve r y l e a s t , l e t ’ s not bl

ck

a m e s s age i f bot h pa r t i e s wa nt i t t

ge

t t hr

ugh.

W or ki ng De f i ni t i

n
f

Spa m

Any com m e r c i al , non- pol i t i c al e m a i l i s s pam , unl e s s ( a ) t he r e c i pi e nt has cons e nt e d t

r

e ce i ve i t , ( b) t he s e nde r and r e ce i ve r have an

ngoi

ng bus i ne s s r e l a t i

ns

hi p,

r

( c ) t he m e s s age r e l a t e s t

a

n

ngoi

ng c

m m e

r c i al t r a ns a c t i

n

be t we e n t he s e nde r a nd r e ce i ve r . Not e : j us t l

oki

ng a t a m e s s age won’ t t e l l you whe t he r

r

not i t ’ s s pam .

Ant i

s

pa m M e a s ur e s

Enf
r

c e l a ws a ga i ns t wi r e f r a ud, f a l s e m e di c a l c l a i m s , e t c .

Re

qui r e a c c ur a t e l a be l i ng

f
r

i gi n; a l l

ws

f i l t e r i ng by

r

i gi n

– Bi g s pam m e r j us t s e nt e nce d t

ni

ne ye a r s i n VA s t a t e pr i s

n

f

r

m i s l abe l i ng

Pr i va t e La ws ui t s by I SPs

I

SP s e nds s pa m m e r c e a s e

a

nd- de s i s t l e t t e r

Spa

m m e r ke e ps s e ndi ng s pam

I

SP f i l e s s ui t

– Cl a i m i ng cybe r

t

r e s pas s – Se e ki ng m one y dam age s – Se e ki ng i nj unc t i

n

aga i ns t f ur t he r s pa m m i ng

Som e

s uc c e s s s

f

a r , but m os t l y us e f ul a s de t e r r e nt

Bl a c kl i s t s

M a

ke l i s t

f

known e m a i l a ddr e s s e s ,

r

known I P a ddr e s s e s ,

f

s pam m e r s

Di

s ca r d e m a i l f r

m

t hos e addr e s s e s

Pr
bl

e m s

– Spa m m e r s t r y t

m i

s l e a d a bout m e s s a ge

r

i gi n – Spa m m e r s m ove a r

und

a l

t

– I nnoc e nt us e r s s

m e

t i m e s e nd up s ha r i ng a ddr e s s e s wi t h s pa m m e r s – Fal s e a c c us a t i

ns

W hi t e l i s t s

M ake

l i s t

f

pe

pl

e / pl a c e s you wa nt t

ge

t e m a i l f r

m
I

m pr a c t i c a l t

a

c c e pt e m a i l

nl

y f r

m

t he s e pe

pl

e

But

s t i l l us e f ul

– M a ke

t

he r a nt i

s

pam m e a s ur e s m or e s t r i nge nt – Exce pt i

n

f

r

pe

pl

e

n

whi t e l i s t

SLIDE 3

3 Paym e nt

Tr

y t

r

a i s e c

s

t

f

s e ndi ng e m ai l

– I de al l y, r a i s e m or e f

r

s pam m e r s t han f

r

nor m al s e nde r s

Pay

i n t he f

r

m

f

:

– M one y – W a s t e d com put a t i

nal

r e s

ur

ce s – Hum a n a t t e nt i

n

Pr

bl

e m s wi t h paym e nt

I

f us i ng r e a l m oney, i nvol ves t he ba nki ng s ys t em

I

f payi ng i n r e s

ur

c e s , wa s t e

f

r e s

ur

c e s

– Re s

ur

ce s a r e c he ap f

r

s pam m e r s anyway

De

t e r s s

m e

l e gi t i m a t e e m a i l –e s pe c i a l l y bi g ( l e gi t i m a t e ) m a i l i ng l i s t s

Se nde r a ut he nt i c a t i

n
Va

r i

us

s c he m es

M ake

s ur e t ha t m a i l c

m es

f r

m

t he r i ght pl a c e , gi ve n t he ( c l a i m e d) s e nde r

– e . g. m y m a i l com e s f r

m

a Pr i nce t

n

I P a ddr e s s

W or

ks

kay,

but

– Com pl i ca t e d i n pr e s e nce

f

f

r

wa r di ng e t c . – Doe s n’ t a ddr e s s s pam bot s

n

s t

l

e n m ac hi ne s

Cont e nt

Ba

s e d Fi l t e r i ng

Cl

a s s i f y i ncom i ng m e s s age s ba s e d

n

c

nt

e nt s

– Appl y f i xe d r ul e s ( e . g.Spam As s as s i n) – M a chi ne l e a r ni ng, ba s e d

n

us e r l a be l i ng

W or

d- ba s e d Ba ye s i a n l e a r ni ng

Fi l t e r i ng I s s ue s

Fa

i r l y a c c ur a t e , but not f

ol

pr

of

– Tr a de

f

f f a l s e pos i t i ve s vs . f a l s e ne ga t i ve s – St i l l ne e d t

l
ok

a t s us pe c t e d- s pam m e s s age s

Spa

m m e r s us i ng count e r m e as ur e s

– “ wor d s al a d”

Ca s e St udy: Do- Not

Em a

i l Li s t

I

n CAN- SPAM Ac t , Congr es s a s ke d FTC t

s

t udy a Na t i

na

l Do- Not

Em a

i l ( DNE) l i s t

– Li ke Do- Not

Cal

l l i s t f

r

t e l e m a r ke t i ng

Congr

e s s a s ke d:

– Shoul d we have a DNE l i s t ? – I f we have

ne

, how s houl d i t wor k?

FTC

hi r e d e xpe r t s ( i nc l udi ng m e ) t

gi

ve t e c hni c a l a dvi c e .

SLIDE 4

4 DNE Li s t : La w

Us

e r s c a n put t he i r e m a i l a ddr e s s e s

n

t he DNE l i s t .

Dom a

i n

wne

r c a n put whol e dom a i n ( e . g. wa s hi ngt

n.

e du)

n

DNE l i s t .

I

l l e ga l t

s

e nd s pa m t

a

nybody

n

t he l i s t .

DNE Li s t : Appr

a

c he s

Gi

ve s pam m e r s t he l i s t

– Ve r y ba d i de a : “ whom - t

s

pa m ” l i s t – Ca n s e e d e a c h s pa m m e r ’ sl i s t wi t h “t e l l t al e” a ddr e s s e s ? ( I nt e r e s t i ng CS t he

r

y pr

bl

e m . )

Spam m e

r s ubm i t s t he i r m a i l i ng l i s t t

DNE

s e r vi ce ; s e r vi ce r e t ur ns “s c r ubbe d” l i s t

– Spa m m e r s t i l l l e a r ns a bout s

m e

va l i d a ddr e s s e s – M i ght be a bl e t

l

i m i t t hi s by l i m i t i ng a c c e s s , c ha r gi ng f

r

a c c e s s , e t c .

DNE Li s t : Appr

a

c he s

Spam -

f

r

wa r di ng s e r vi ce

– Spa m m e r m us t di r e c t a l l s pa m t hr

ugh

a DNE s e r vi c e – Se r vi c e f

r

wa r ds e m a i l t

a

ddr e s s e s not

n

DNE l i s t – Si l e nt l y dr

ps

i f a ddr e s s i s

n

l i s t – Doe s n’ t l e a k i nf

r

m a t i

n

a bout l i s t – I r

ny:

a s a n a nt i

s

pa m m e a s ur e , t he gove r nm e nt i s f

r

wa r di ng s pa m

Al

l a ppr

a

c he s : r i s k t ha t l i s t wi l l l e ak

Out l a w Spa m

Bi

gges t pr

bl

e m f

r

DNE Li s t i s

ut

l a w s pa m m e r s

– I gnor e t he l a w – Se nd s pam f r

m

s t

l

e n m ac hi ne s – Ve r y ha r d t

c

a t c h t he m

Spa m : Bot t

m

Li ne

Spa

m wi l l be wi t h us , a s l

ng

a s pe

pl

e buy s t uf f f r

m

s pam m e r s .

Pe
pl

e wi l l ke e p buyi ng t he ki nds

f

pr

duc

t s t ha t s pa m m e r s s e l l .

At

be s t , we ’ l l f i ght t

a