On Automatically Detecting Malicious Impostor Emails

Authors:
Erhan J. Kartaltepe;Shouhuai Xu
Affiliations:
Department of Computer Science, University of Texas at San Antonio, {ekartalt,shxu}@cs.utsa.edu;Department of Computer Science, University of Texas at San Antonio, {ekartalt,shxu}@cs.utsa.edu
Venue:
Proceedings of the 2005 conference on Applied Public Key Infrastructure: 4th International Workshop: IWAP 2005
Year:
2005

Citing 8
Cited 1

Certified Electronic Mail

ESORICS '96 Proceedings of the 4th European Symposium on Research in Computer Security: Computer Security
Threshold Cryptosystems

CRYPTO '89 Proceedings of the 9th Annual International Cryptology Conference on Advances in Cryptology
Pricing via Processing or Combatting Junk Mail

CRYPTO '92 Proceedings of the 12th Annual International Cryptology Conference on Advances in Cryptology
How to Own the Internet in Your Spare Time

Proceedings of the 11th USENIX Security Symposium
Cryptovirology: Extortion-Based Security Threats and Countermeasures

SP '96 Proceedings of the 1996 IEEE Symposium on Security and Privacy
Monitoring and early warning for internet worms

Proceedings of the 10th ACM conference on Computer and communications security
Stopping outgoing spam

EC '04 Proceedings of the 5th ACM conference on Electronic commerce
Controlling spam by secure internet content selection

SCN'04 Proceedings of the 4th international conference on Security in Communication Networks

Towards Blocking Outgoing Malicious Impostor Emails

WOWMOM '06 Proceedings of the 2006 International Symposium on on World of Wireless, Mobile and Multimedia Networks

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we explore the problem we call “malicious impostor emails.” Compared with the fairly well-known abuses such as spam and email worms, malicious impostor emails could be much more catastrophic because their payloads may directly target at the victim users' cryptographic keys (via whatever means) and their content---except the malicious payload as an attachment---could look perfectly like a legitimate one. As a first step in dealing with malicious impostor emails, we present a partial solution that mitigates their damage without forcing the involvement of the users.