Presentation is loading. Please wait.

Presentation is loading. Please wait.

Fighting spam by finding and listing Exploitable Servers.

Published byTimothy Benson Modified over 8 years ago

Similar presentations

Presentation on theme: "Fighting spam by finding and listing Exploitable Servers."— Presentation transcript:

1 Fighting spam by finding and listing Exploitable Servers.

2 What is spam…? Why is it a problem…? Why is it a problem…? Where do viruses fit in…? Where do viruses fit in…? Spyware, what is it what does it do…? Spyware, what is it what does it do…? “Phishing”, what is it…? “Phishing”, what is it…? The merging of technologies. The merging of technologies. The new attack vector. The new attack vector. What can be done…? What can be done…?

3 Fighting spam by finding and listing Exploitable Servers. Unsolicited Bulk Email…? Unsolicited Commercial Email…? Unsolicited Commercial Email…? Unsolicited Promotional Email…? Unsolicited Promotional Email…? Not what we’re sending…? Not what we’re sending…? Unsolicited Email…? Unsolicited Email…? Objectionable Email…? Objectionable Email…? What the ACA tells us is spam…? What the ACA tells us is spam…?

4 Fighting spam by finding and listing Exploitable Servers.

5

6

7

8

9

10 All of the above….! Each message is spam in it’s own right. Each message is spam in it’s own right. Each poses it’s own dangers. Each poses it’s own dangers. We should be working to stop them all. We should be working to stop them all.

11 Fighting spam by finding and listing Exploitable Servers. Open Relays Proxy Servers Proxy Servers Spam “Bots” Spam “Bots” DoS “Bots” DoS “Bots” More sinister directions... More sinister directions... Spyware Spyware Key-loggers Key-loggers

12 Fighting spam by finding and listing Exploitable Servers. Open Relays, are they really a problem…? How about proxy servers….? How about proxy servers….? The risks: The risks: Open relays are diminished in numbers. Open relays are diminished in numbers. Proxies work both ways. Proxies work both ways. Proxy servers being delivered in spam. Proxy servers being delivered in spam.

13 Fighting spam by finding and listing Exploitable Servers. Tracking movements across the Net Tracking movements across the Net Demographics Demographics Parental Control Software Parental Control Software Surveillance Surveillance Key-logging Key-logging Complete user tracking Complete user tracking How can we get rid of it…? How can we get rid of it…?

14 Fighting spam by finding and listing Exploitable Servers. (fish´ing) (n.) The act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information that will be used for identity theft. How do we combat it…? How do we combat it…? What can we do when we get caught...? What can we do when we get caught...? How can we prevent it…? How can we prevent it…?

15 Fighting spam by finding and listing Exploitable Servers. Email viruses combining with exploits. Email viruses combining with exploits. Newer Trojans that avoid system calls to “hide”. Newer Trojans that avoid system calls to “hide”. Newer ones allow remote upload of software. Newer ones allow remote upload of software. Continually changing ports to avoid detection. Continually changing ports to avoid detection. Calling home, or using IRC servers. Calling home, or using IRC servers.

16 Fighting spam by finding and listing Exploitable Servers. Open Relays Open Relays Open Proxies Open Proxies Trojans Trojans Viruses Viruses Spyware Spyware What’s this all leading to….? What’s this all leading to….? Spam, Spam, Spam, and more Spam...! Spam, Spam, Spam, and more Spam...! So what is the new attack vector…? So what is the new attack vector…?

17 Fighting spam by finding and listing Exploitable Servers.

18

19 AHBLThe Abusive Hosts Blocking ListHits: 100910% BOGONScompletewhois.com: Bogon IP'sHits: 1441% BOPMBlitzed Open Proxy MonitorHits: 5106% CBLComposite Blocking ListHits: 301024% DRBLDistributed Realtime Blocking ListHits: 165311% DSBLDistributed Server Boycott ListHits: 296225% FIVETENLocal Blackholes at Five-TenHits: 590347% JIPPGMAJIPPG's Relay Blackhole ListHits: 1421% NJABLNot Just Another Bogus ListHits: 176916% NOMOREdr. Jørgen Mash's DNSblHits: 3383% ORDBOpen Relay DataBaseHits: 1670% PSBLPassive Spam Block ListHits: 11619% SBLSpamhaus Block ListHits: 6986% SORBSSpam and Open Relay Blocking SystemHits: 464342% SPAMBAGSpambagsHits: 116711% SPAMCOPSpamCopHits: 186817% SPAMRBLHits: 90% SPAMSITESpamware Peddler and SpamservicesHits: 50% SPEWSSpam Prevention Early Warning SystemHits: 155212% UCEPROTHits: 8808% WPBLWeighted Private Block ListHits: 7787% Which shows statistics mean nothing!

20 Fighting spam by finding and listing Exploitable Servers.

21

Download ppt "Fighting spam by finding and listing Exploitable Servers."

Similar presentations

Providing protection from potential security threats that exist for any internet-connected computer is termed e- security. It is important to be able to.

Providing protection from potential security threats that exist for any internet-connected computer is termed e- security. It is important to be able to.
Unit 1 Living in the Digital WorldChapter 1 Lets Communicate Internet Safety.

Unit 1 Living in the Digital WorldChapter 1 Lets Communicate Internet Safety.
Protect your PC virus, worm, Trojan horse, phishing, spam, botnet and zombies, spoofing, social engineering, identity theft, spyware, rootkits Click.

Protect your PC virus, worm, Trojan horse, phishing, spam, botnet and zombies, spoofing, social engineering, identity theft, spyware, rootkits Click.
Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill Technology Education Copyright © 2006 by The McGraw-Hill Companies,

Copyright © 2006 by The McGraw-Hill Companies, Inc. All rights reserved. McGraw-Hill Technology Education Copyright © 2006 by The McGraw-Hill Companies,
Cyber check Do you work safely and responsibly online? Do you know about the risks to your cyber security? What are your online responsibilities ? How.

Cyber check Do you work safely and responsibly online? Do you know about the risks to your cyber security? What are your online responsibilities ? How.
Netiquette and Safety A Student ’ s Guide to Proper and Safe Web Behavior.

Netiquette and Safety A Student ’ s Guide to Proper and Safe Web Behavior.
Chapter 4 Personal Security

Chapter 4 Personal Security
MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 Hossein BIDGOLI Phishing Email that bites Paying for Privacy Pirates.

MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 Hossein BIDGOLI Phishing that bites Paying for Privacy Pirates.
Malicious Attacks Angela Ku Adeline Li Jiyoung You Selena Yuen.

Malicious Attacks Angela Ku Adeline Li Jiyoung You Selena Yuen.
The problems associated with operating an effective anti-spam blocklist system in an increasingly hostile environment. Robert Gallagher September 2004.

The problems associated with operating an effective anti-spam blocklist system in an increasingly hostile environment. Robert Gallagher September 2004.
BOTNETS/Cyber Criminals  How do we stop Cyber Criminals.

BOTNETS/Cyber Criminals  How do we stop Cyber Criminals.
UC Irvine’s New Anti-Spam Measures Keith Chong Network & Support Programming Network & Academic Computing Services UC Irvine August 9, 2005 Keith Chong.

UC Irvine’s New Anti-Spam Measures Keith Chong Network & Support Programming Network & Academic Computing Services UC Irvine August 9, 2005 Keith Chong.
1 Understanding Botnet Phenomenon MITP 458 - Kevin Lynch, Will Fiedler, Navin Johri, Sam Annor, Alex Roussev.

1 Understanding Botnet Phenomenon MITP Kevin Lynch, Will Fiedler, Navin Johri, Sam Annor, Alex Roussev.
Bots and Botnets CS-431 Dick Steflik. DDoS ● One of the most common ways to mount a Distributed Denial of Service attacks is done via networks of zombie.

Bots and Botnets CS-431 Dick Steflik. DDoS ● One of the most common ways to mount a Distributed Denial of Service attacks is done via networks of zombie.
Term 2, 2011 Week 3. CONTENTS Network security Security threats – Accidental threats – Deliberate threats – Power surge Usernames and passwords Firewalls.

Term 2, 2011 Week 3. CONTENTS Network security Security threats – Accidental threats – Deliberate threats – Power surge Usernames and passwords Firewalls.
MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 LO1 Describe information technologies that could be used in computer.

MIS PERSONAL, LEGAL, ETHICAL, AND ORGANIZATIONAL ISSUES OF INFORMATION SYSTEMS CHAPTER 4 LO1 Describe information technologies that could be used in computer.
Threats and ways you can protect your computer. There are a number of security risks that computer users face, some include; Trojans Conficker worms Key.

Threats and ways you can protect your computer. There are a number of security risks that computer users face, some include; Trojans Conficker worms Key.
Security Issues: Phishing, Pharming, and Spam

Security Issues: Phishing, Pharming, and Spam
Alisha Horsfield INTERNET SAFETY. firewall Firewall- a system made to stop unauthorised access to or from a private network Firewalls also protects your.

Alisha Horsfield INTERNET SAFETY. firewall Firewall- a system made to stop unauthorised access to or from a private network Firewalls also protects your.
MKTG 476 SECURITY Lars Perner, Instructor 1 Internet Security  Servers  Hacking  Publicly available information  Information storage  Intrusion methods.

MKTG 476 SECURITY Lars Perner, Instructor 1 Internet Security  Servers  Hacking  Publicly available information  Information storage  Intrusion methods.

Similar presentations

Ads by Google