Deprecated: Function create_function() is deprecated in /home/hidefide/public_html/blog/wp-content/plugins/wr-pagebuilder/core/core.php on line 127
{"id":580,"date":"2017-04-09T16:15:38","date_gmt":"2017-04-09T16:15:38","guid":{"rendered":"https:\/\/icaruspressblog.wordpress.com\/?p=580"},"modified":"2019-04-17T11:28:06","modified_gmt":"2019-04-17T11:28:06","slug":"netherlands-study-spam-comes-from-the-wrong-side-of-the-tracks","status":"publish","type":"post","link":"https:\/\/hidefideas.com\/blog\/2017\/04\/09\/netherlands-study-spam-comes-from-the-wrong-side-of-the-tracks\/","title":{"rendered":"Netherlands Study: Spam Comes from the Wrong Side of the Tracks"},"content":{"rendered":"

$\"Crumb_btm\"$ If the Internet universe was analogous to the Star Wars universe, then Spam wouldn\u2019t be the Emperor. Nor Darth Vader. It wouldn\u2019t even be Boba Fett. As slimy as spammers are, they wouldn\u2019t be in the same discussion as Jabba the Hutt or General Grievous. No sir. At very best, spammers would be likened to Salacious Crumb, Jabba\u2019s creepy little rat-like pet, and that\u2019s a perfect analogy of the role spammers play in the Internet universe.<\/p>\n

As it turns out, the University of Twente, in the Netherlands, agrees with that assessment, sort of. Giovane Moura of the University\u2019s Centre for Telematics and Information Technology recently published a study where more than 42,000 Autonomous System Numbers (ASNs) were monitored online using the Composite Blocking List (CBL)<\/a>. ASNs establish the routing and originating IPs for email, and so the researcher was able to track spam messages back to their originating servers, and guess what? Spammers truly are<\/em> creepy little rat-like denizens, in the sense that they come from bad neighborhoods.<\/p>\n

The study found that a huge portion of the world\u2019s spam traffic can be reduced to a very small number of sources, the \u2018bad neighborhoods,\u2019 per se. Almost half of the globe\u2019s spam traffic has been identified as belonging to less than half of a percent of the world\u2019s Internet providers, and that\u2019s a promising new development in the ongoing war on spam.<\/p>\n

The University\u2019s website<\/a> explains it thusly: \u201cJust like in the real world, the internet has also \u201cbad neighbourhoods\u201d whose streets are not safe and where crime rates are higher than in other districts. Research into these \u201cBad Neighbourhoods on the Internet\u201d can lead to better security solutions. To this end, Moura has carried out the first systematic investigation of malicious hosts, by monitoring and analysing network data. His main conclusion is that malicious activity is indeed concentrated in limited zones: areas in which the IP addresses show strong similarities, per ISP, or even per country. For instance, this PhD researcher found that 62% of the addresses at one ISP were related to spam. This knowledge can be used to link security measures to specific ISPs.\u201d<\/p>\n

Phishing Holes<\/strong><\/h2>\n
If you\u2019ve ever gone fishing, you know that when you find that one spot that\u2019s good to you, you\u2019ve found your favorite fishing hole, and none other will do. It\u2019s somewhat the same for phishers, apparently. What\u2019s also interesting about the study is how it identifies geographical \u2018hot zones\u2019 for different types of spamming activity. \u201cDifferent types of activities are associated with different parts of the world. For instance, spam comes mainly from southern Asian countries, while phishing occurs primarily in the United States and other developed countries.\u201d The main reason for the latter \u2013 the phishing activity \u2013 interestingly enough, is that the U.S. and other developed countries contain the most data centers and cloud computing providers. And we\u2019ve long known that Asia has been a hotbed for spam activity, but knowing that such a huge amount of spam can be isolated to a few \u2018bad neighborhoods\u2019 is promising, to say the least.<\/p>\n
Bad Eggs<\/strong><\/h2>\n
It\u2019s important, the University\u2019s site writes, \u201cto distinguish between individual IP addresses that launch one-off attacks and a whole Bad Neighbourhood that almost always launches repeated attacks. This information, too, is very useful in terms of establishing a security strategy. The history of a Bad Neighbourhood, as identified by [Giovane Moura], can be of value here.\u201d<\/p>\n
Shock and Awe<\/strong><\/h2>\n
The implications of this study are very encouraging, since we now know that spam and its related fraudulent activities can be isolated and identified in a few narrow spaces. Imagine being able to flick the switch on some of these ISPs and reduce the world\u2019s spam by a significant margin. For example, the study identified a single ISP in Nigeria (where else?) where more than 60% of the ISPs traffic was spam-related.<\/p>\n
Now that we know a huge chunk of the malicious code-based spam is coming from Asia, we may be able to develop additional defenses against messages originating in that area. Also, consider that now, because we know that phishing is isolated in the U.S. and more developed countries, we can focus anti-fraud efforts designed to target phishing-like activities in those countries.<\/p>\n
The Sydney Morning Herald<\/a> says it all, pointing out that the \u201cmost sobering statistic [of the study is] that just 20 ISPs – or less than 0.0005 per cent the world’s total 42,000 – represented almost 50 per cent of all spam sources.\u201d<\/p>\n
You may want to take the time to read the report. Copies of the report are available upon requests to the University of Twente.<\/p>\n","protected":false},"excerpt":{"rendered":"
If the Internet universe was analogous to the Star Wars universe, then Spam wouldn\u2019t be the Emperor. Nor Darth Vader. It wouldn\u2019t even be Boba… <\/p>\n","protected":false},"author":3,"featured_media":590,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,14],"tags":[11,9,10,8,7],"class_list":["post-580","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-spam","tag-allspammedup","tag-bot","tag-botnet","tag-malware","tag-spam","jsn-master"],"_links":{"self":[{"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/posts\/580","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/comments?post=580"}],"version-history":[{"count":2,"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/posts\/580\/revisions"}],"predecessor-version":[{"id":1750,"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/posts\/580\/revisions\/1750"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/media\/590"}],"wp:attachment":[{"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/media?parent=580"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/categories?post=580"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hidefideas.com\/blog\/wp-json\/wp\/v2\/tags?post=580"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}