Fatores que afetam o comportamento de spammers na rede
Resumo
O propósito deste trabalho é entender melhor o comportamento de spammers (responsáveis pelo envio de mensagens de spam) na rede, e assim trazer mais informações para o combate a eles. Para isso utilizamos um sistema de honeypots virtualizados especialmente desenvolvidos para a coleta de spam que possibilita avaliar a influência de diversos fatores no comportamento dos transmissores. Os resultados mostram que as variações na configuração dos cenários pode afetar drasticamente o volume de spam coletado, bem como suas características internas. Em particular, o trabalho identificou dois tipos bastante diversos de transmissores: spammers em larga escala, que usam poucas máquinas com muitos recursos, e botnets, que enviam cada uma um número limitado de mensagens.Referências
Giles, J. (2010). To beat spam, first get inside its head. New Scientist, 205:20–20.
Guerrero, C. D. and Labrador, M. A. (2010). On the applicability of available bandwidth estimation techniques and tools. Comput. Commun., 33:11–22.
Jain, R. (2008). The Art Of Computer Systems Performance Analysis:Techniques for Experimental Design, Measurement, Simulation, and Modeling. Wiley India Pvt. Ltd.
John, J. P., Moshchuk, A., Gribble, S. D., and Krishnamurthy, A. (2009). Studying spamming botnets using botlab. In NSDI’09: Proceedings of the 6th USENIX symposium on Networked systems design and implementation, pages 291–306, Berkeley, CA, USA. USENIX Association.
Kreibich, C., Kanich, C., Levchenko, K., Enright, B., Voelker, G. M., Paxson, V., and Savage, S. (2008). On the spam campaign trail. In LEET’08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, pages 1–9, Berkeley, CA, USA. USENIX Association.
Li, F. and Hsieh, M.-H. (2006). An empirical study of clustering behavior of spammers and group-based anti-spam strategies. Proceedings of the Third Conference on Email and Anti-Spam (CEAS). Mountain View, CA.
Mycroft, A. and Sharp, R. (2001). Hardware/software co-design using functional languages. In Margaria, T. and Yi, W., editors, Tools and Algorithms for the Construction and Analysis of Systems, volume 2031 of Lecture Notes in Computer Science, pages 236–251. Springer Berlin Heidelberg.
Pathak, A., Hu, Y. C., and Mao, Z. M. (2008). Peeking into spammer behavior from a unique vantage point. In LEET’08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, pages 1–9, Berkeley, CA, USA. USENIX Association.
Provos, N. (2004). A virtual honeypot framework. In Proceedings of the 13th conference on USENIX Security Symposium Volume 13, SSYM’04, pages 1–1, Berkeley, CA, USA. USENIX Association.
Provos, N. and Holz, T. (2007). Virtual Honeypots: From Botnet Tracking to Intrusion Detection. Addison-Wesley Professional.
Radicati, S. (2009). Email statistics report, 2009-2013. Relatório anual, The Radicati Group, Inc. http://www.radicati.com/.
Sardana, A. and Joshi, R. (2009). An auto-responsive honeypot architecture for dynamic resource allocation and qos adaptation in ddos attacked networks. Comput. Commun., 32:1384–1399.
Shue, C. A., Gupta, M., Lubia, J. J., Kong, C. H.,, and Yuksel, A. (2009). Spamology: A study of spam origins. In Conference on Email and Anti Spam (CEAS).
Silva, G. C. (2011). Análise de fatores que afetam o comportamento de spammers na rede. Dissertação de mestrado, Universidade Federal de Minas Gerais.
Steding-Jessen, K., Vijaykumar, N. L., and Montes, A. (2008). Using low-interaction honeypots to study the abuse of open proxies to send spam. INFOCOMP Journal of Computer Science.
Guerrero, C. D. and Labrador, M. A. (2010). On the applicability of available bandwidth estimation techniques and tools. Comput. Commun., 33:11–22.
Jain, R. (2008). The Art Of Computer Systems Performance Analysis:Techniques for Experimental Design, Measurement, Simulation, and Modeling. Wiley India Pvt. Ltd.
John, J. P., Moshchuk, A., Gribble, S. D., and Krishnamurthy, A. (2009). Studying spamming botnets using botlab. In NSDI’09: Proceedings of the 6th USENIX symposium on Networked systems design and implementation, pages 291–306, Berkeley, CA, USA. USENIX Association.
Kreibich, C., Kanich, C., Levchenko, K., Enright, B., Voelker, G. M., Paxson, V., and Savage, S. (2008). On the spam campaign trail. In LEET’08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, pages 1–9, Berkeley, CA, USA. USENIX Association.
Li, F. and Hsieh, M.-H. (2006). An empirical study of clustering behavior of spammers and group-based anti-spam strategies. Proceedings of the Third Conference on Email and Anti-Spam (CEAS). Mountain View, CA.
Mycroft, A. and Sharp, R. (2001). Hardware/software co-design using functional languages. In Margaria, T. and Yi, W., editors, Tools and Algorithms for the Construction and Analysis of Systems, volume 2031 of Lecture Notes in Computer Science, pages 236–251. Springer Berlin Heidelberg.
Pathak, A., Hu, Y. C., and Mao, Z. M. (2008). Peeking into spammer behavior from a unique vantage point. In LEET’08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, pages 1–9, Berkeley, CA, USA. USENIX Association.
Provos, N. (2004). A virtual honeypot framework. In Proceedings of the 13th conference on USENIX Security Symposium Volume 13, SSYM’04, pages 1–1, Berkeley, CA, USA. USENIX Association.
Provos, N. and Holz, T. (2007). Virtual Honeypots: From Botnet Tracking to Intrusion Detection. Addison-Wesley Professional.
Radicati, S. (2009). Email statistics report, 2009-2013. Relatório anual, The Radicati Group, Inc. http://www.radicati.com/.
Sardana, A. and Joshi, R. (2009). An auto-responsive honeypot architecture for dynamic resource allocation and qos adaptation in ddos attacked networks. Comput. Commun., 32:1384–1399.
Shue, C. A., Gupta, M., Lubia, J. J., Kong, C. H.,, and Yuksel, A. (2009). Spamology: A study of spam origins. In Conference on Email and Anti Spam (CEAS).
Silva, G. C. (2011). Análise de fatores que afetam o comportamento de spammers na rede. Dissertação de mestrado, Universidade Federal de Minas Gerais.
Steding-Jessen, K., Vijaykumar, N. L., and Montes, A. (2008). Using low-interaction honeypots to study the abuse of open proxies to send spam. INFOCOMP Journal of Computer Science.
Publicado
06/11/2011
Como Citar
SILVA, Gabriel C.; STEDING-JESSEN, Klaus; HOEPERS, Cristine; CHAVES, Marcelo H. P.; MEIRA JR., Wagner; GUEDES, Dorgival.
Fatores que afetam o comportamento de spammers na rede. In: SIMPÓSIO BRASILEIRO DE SEGURANÇA DA INFORMAÇÃO E DE SISTEMAS COMPUTACIONAIS (SBSEG), 11. , 2011, Brasília.
Anais [...].
Porto Alegre: Sociedade Brasileira de Computação,
2011
.
p. 141-154.
DOI: https://doi.org/10.5753/sbseg.2011.20569.
