The Register® — Biting the hand that feeds IT

Feeds

Regcast training : Hyper-V 3.0, VM high availability and disaster recovery

"Once they learn about retrying it starts to fail," he said. Eggendorfer also compared spam filters to painkillers: "It relieves the symptoms, but doesn't eliminate the cause."

For other types of spam, such as Nigerian 419 scams, this technique may be less effective as these spammers win if they snare a single human sucker, no matter how long it takes. The Spamnet (originally called Spamalot until Monty Python objected) project, from the University of Illinois at Chicago, set out to see if they could consume enough of the spammers' time and resources to make it not worth their while to continue.

The technique was simple enough and easily copied: reply to the spam with email expressing interest and asking for a phone call to a supplied phone number. Doing this manually resulted in as many as 50 email exchanges and numerous phone calls. Similarly, following the links in phishing messages and filling out web forms netted as many as 25 calls from mortgage brokers.

Based on this, the Spamnet group attempted to automate the process by creating three types of agent: Arthur (Nigerian 419), Patsy (web forms), and Lancelot (phishing), and achieved some success in getting spammers to interact with the agents. This technique might allow law enforcement and banks to track down and eliminate the sources of these types of attack.

Both these papers share another helpful characteristic: they do not break email as we know it. Other efforts, such as using multiple filters and detecting the obscured text in image spam (presented by Battista Biggio from the University of Cagliari) also seem promising.

Simpson's next effort, to be released soon, is working on a way to automate a way for senders to tell the receiving server that a message is not actually spam.

"It makes false positives a non-issue," he says.

Still, all the papers made one thing plain: spam isn't going away any time soon, despite all the research being thrown at the problem.

Which is why those outside the profession favour hiring a bunch of programmer-detectives and a couple of trained assassins instead. ®

Agentless Backup is Not a Myth

More from The Register

 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
Flash flaw potentially makes every webcam or laptop a PEEPHOLE
But it's a Google problem - Chrome only, insists Adobe
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?
 breaking news
'BadNews is malware' says outfit that found it
Google says code harmless but Lookout says code base is evolving
Panda-peddlers cuffed for chess gambling gambit
More porridge on the menu for Chinese coders after second offence