Feeds

Spam: it sucks like a tarpit

Trapping the pump'n'dumpers

Providing a secure and efficient Helpdesk

"Once they learn about retrying it starts to fail," he said. Eggendorfer also compared spam filters to painkillers: "It relieves the symptoms, but doesn't eliminate the cause."

For other types of spam, such as Nigerian 419 scams, this technique may be less effective as these spammers win if they snare a single human sucker, no matter how long it takes. The Spamnet (originally called Spamalot until Monty Python objected) project, from the University of Illinois at Chicago, set out to see if they could consume enough of the spammers' time and resources to make it not worth their while to continue.

The technique was simple enough and easily copied: reply to the spam with email expressing interest and asking for a phone call to a supplied phone number. Doing this manually resulted in as many as 50 email exchanges and numerous phone calls. Similarly, following the links in phishing messages and filling out web forms netted as many as 25 calls from mortgage brokers.

Based on this, the Spamnet group attempted to automate the process by creating three types of agent: Arthur (Nigerian 419), Patsy (web forms), and Lancelot (phishing), and achieved some success in getting spammers to interact with the agents. This technique might allow law enforcement and banks to track down and eliminate the sources of these types of attack.

Both these papers share another helpful characteristic: they do not break email as we know it. Other efforts, such as using multiple filters and detecting the obscured text in image spam (presented by Battista Biggio from the University of Cagliari) also seem promising.

Simpson's next effort, to be released soon, is working on a way to automate a way for senders to tell the receiving server that a message is not actually spam.

"It makes false positives a non-issue," he says.

Still, all the papers made one thing plain: spam isn't going away any time soon, despite all the research being thrown at the problem.

Which is why those outside the profession favour hiring a bunch of programmer-detectives and a couple of trained assassins instead. ®

New hybrid storage solutions

More from The Register

next story
Google recommends pronounceable passwords
Super Chrome goes into battle with Mr Mxyzptlk
Infosec geniuses hack a Canon PRINTER and install DOOM
Internet of Stuff securo-cockups strike yet again
Reddit wipes clean leaked celeb nudie pics, tells users to zip it
Now we've had all THAT TRAFFIC, we 'deplore' this theft
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
TorrentLocker unpicked: Crypto coding shocker defeats extortionists
Lousy XOR opens door into which victims can shove a foot
Greater dev access to iOS 8 will put us AT RISK from HACKERS
Knocking holes in Apple's walled garden could backfire, says securo-chap
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.