Title
Spam Mail Discrimination System Based on Behavior of DNS Servers Associated with URLs
Abstract
As one of anti-spam technologies, DNSBL based on the URLs or their corresponding IP addresses in the messages is well used. However, some spam mails cannot be filtered by conventional DNSBLs since the spammers create websites using various techniques such as botnet, fast-flux and Wildcard DNS record. To discriminate such spam mails, we ananalyzed DNS record characteristics corresponding to the domain name in the URLs in actual spam mails. According to this analysis, in this paper we propose a spam mail discrimination system based on the behavior of DNS servers. Since the behavior checking process is likely to wait for a timeout, the system queries some records to a DNS server simultaneously and decides whether the mail is spam or not on receiving the first reply. In addition, the system also introduces a blacklist for the IP addresses of the DNS servers.
Year
DOI
Venue
2012
10.1109/SAINT.2012.68
SAINT
Keywords
Field
DocType
ip addresses,corresponding ip address,dns,spam mail,actual spam mail,spam mail discrimination system,url,dns servers,dnsbl,wildcard dns record,websites,dns servers associated,unsolicited e-mail,spammers,antispam technologies,botnet,behavior checking process,e-mail,web sites,dns server,fast-flux,ip address,anti-spam technology,spam,dns record characteristic,security of data,servers
DNSBL,Computer science,Wildcard DNS record,Srizbi botnet,DNS hijacking,Domain Name System,Spam and Open Relay Blocking System,Computer network,Forum spam,Spamming
Conference
ISBN
Citations 
PageRank 
978-0-7695-4737-4
0
0.34
References 
Authors
2
6
Name
Order
Citations
PageRank
Shuji Suwa120.86
Nariyoshi Yamai24225.06
Kiyohiko Okayama32611.03
Motonori Nakamura411930.15
Keita Kawano5179.04
Gada601.01