Feeds

Brightmail shifts spam/e-mail virus battle to ISPs

No new free accounts, but you can lobby for it

  • alert
  • submit to reddit

Internet Security Threat Report 2014

Spam-busting outfit Brightmail may not have room for new individual subscribers, but it's pressing the battle into the corporate, ISP (Internet service provider) and ASP (application service provider) arenas.

"Free Brightmail reached its quota of eligible accounts. In order to insure the efficiency of spam-filtering for our current users, We are no longer registering new email addresses," the company regrets to say.

Nevertheless, it's still offering services to anyone who handles a large volume of mail, and has recently grabbed a few impressive accounts with such major players as AT&T, Earthlink, MSN and Excite.

Brightmail begins by setting up e-mail accounts at numerous domains and analysing the inevitable buildup of the offending pink substance. Filtering rules are worked out so that legitimate mail with unfortunate similarities isn't blocked.

"The I-Love-You virus is a great example," Brightmail CEO Gary Hermansen told The Register. "'I love you' is a common phrase; lots of mail has a similar header, and we obviously don't want to filter it."

Thus a series of identification tags are used to develop filtering rules so that one's puppy-love pleadings, sighs and spontaneous ejaculations will arrive at their intended destination.

The actual filtering is done on site at the business or ISP using the system, via a dedicated mail server or 'mailwall' as Brightmail calls it. Rule updates are processed in real time and automatically downloaded to the servers, usually at intervals of once every five to ten minutes.

Mail is sorted, not deleted, Hermansen says. A single copy of suspected spam or malicious mail is diverted to a junk directory, which the user can examine for mis-diagnosed items.

Another promising feature is Brightmail's ability to get the jump on anti-virus software when a spam attack such as the Melissa or Love Bug worms are launched. If one's virus definitions aren't up to date, or if one's heuristic features are set low or disabled to prevent false positives, a self-propagating spam blitz will likely nail one.

Because Brightmail-enabled servers are updated automatically and continually, it's a safer bet that companies and ISPs using them will escape with little or no effect.

"The best way to defeat malicious mail is to block it at the gateway," Hermansen says.

According to the Brightmail spam calculator, which Web visitors can play around with, if we assume a conservative estimate of 100 spammers sending 250,000 spam messages a day each, in one year that accounts for 9.125 billion messages, or 120 per Netizen, with an estimated cost of $255 million in wasted bandwidth.

We thought ten thousand spammers worldwide would be a more realistic guess, so we plugged it into the spam calculator along with the more conservative output estimate of only 50,000 messages per day, and came up with the outrageous figure of 182 billion spam messages zipping around the Net each year.

So maybe we got carried away. Give it a go yourself. ®

Related Stories

Spam filters don't work shock new survey
BrightLight offers free spam busting for the masses

Security for virtualized datacentres

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Big Content outs piracy hotbeds: São Paulo, Beijing ... TORONTO?
MPAA calls Canadians a bunch of bootlegging movie thieves
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
US court SHUTS DOWN 'scammers posing as Microsoft, Facebook support staff'
Netizens allegedly duped into paying for bogus tech advice
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Verizon bankrolls tech news site, bans tech's biggest stories
No agenda here. Just don't ever mention Net neutrality or spying, ok?
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Getting ahead of the compliance curve
Learn about new services that make it easy to discover and manage certificates across the enterprise and how to get ahead of the compliance curve.