Finding and analyzing evil cities on the internet
AIMS'11 Proceedings of the 5th international conference on Autonomous infrastructure, management, and security: managing the dynamics of networks and services
| Hi-index | 0.00 |
This paper proposes a spam filtering technique called EGPA (Email Geographic Path Analysis) which allows network administrators to cut off some spam traffic with forged route information on email delivery. In our approach, route information is first extracted to build email path, and then geographic location of each node in the path is determined. Further, we detect spam by nodes' geographic information deviation. We evaluate the performance of our EGPA algorithm, using email traffics captured from one backbone link which crosses geographic boundary of China. Experimental results indicate that the method is effective and practical, with at least 13.9% reduction of email traffic for anti-spam.