TC: Small: Understanding the Roots of the Spam Problem -- Email Address Trafficking

现有的反垃圾邮件技术，如垃圾邮件过滤器和信誉系统，由于垃圾邮件发送者使用多媒体内容(难以过滤)和僵尸网络(它们掩盖了垃圾邮件发送者的真实身份，从而阻碍了信誉系统)，面临着越来越大的困难。这个项目的目标是通过瞄准电子邮件地址分发渠道来补充这些现有的努力，在这些渠道中，地址列表在不道德的各方之间进行买卖。作为第一个必要的步骤，这个项目？S的目标是更好地了解电子邮件贩运现象。这是一个结合电子邮件地址贩运来研究电子邮件垃圾邮件的独特机会。该团队最近为互联网用户建立了一个系统，作为一个副作用，它能够收集数据，这些数据将包含这种分析所需的信息。其次，他们获得了凯斯西储大学IT组织的合作，为多达500名用户测试部署了该系统，并将其保持至少一年，这将使他们能够为大规模研究和分析收集大量数据。这项提议将从一个独特的角度研究垃圾邮件？电子邮件地址非法交易。虽然以前的研究通过考虑电子邮件内容和发件人来表征垃圾邮件，但地址贩运是垃圾邮件问题的一个重要方面，更好地了解地址贩运可以开辟新的有效方法来打击垃圾邮件。更广泛的影响包括它有可能建立更好的机制来打击垃圾邮件，促进与系内数据挖掘教师的合作，并通过分别向互联网应用程序添加应用程序级网络安全的材料来加强研究生和本科生的教育。研究生课程和计算机网络？核心本科课程。

Existing anti-spam techniques, such as spam filters and reputation systems, face growing difficulties due to spammers' use of multimedia content (which is hard to filter) and botnets (which mask true spammer identity and thus handicap reputation systems). Te goal of this project is to complement these existing efforts by targeting email address distribution channels, where lists of addresses are bought and sold among unscrupulous parties. As a first necessary step, this project?s goal is to better understand the email trafficking phenomenon. This is a unique opportunity to study email spam in conjunction with email address trafficking. The team recently built a system for Internet users that, as a side effect, is able to collect the data that would contain information necessary for this analysis. Second, they secured cooperation from the Case Western Reserve University IT organization to test-deploy this system for up to 500 users and keep it in place for at least a year, which would allow them to collect a trove of data for a large-scale study and analysis. This proposal will study spam from a unique perspective ? email address trafficking. While previous studies characterize spam by considering email content and senders, address trafficking represents an important aspect of the spam problem, and better understanding of address trafficking can open new effective ways to combat spam. The broader impact includes its potential for better mechanisms to combat spam, for fostering collaboration with data mining faculty within the department, and for enhancing graduate and undergraduate education by adding material on application-level network security to, respectively ?Internet Applications? graduate course and to the ?Computer Networks? core undergraduate course.