Labelling spam through the analysis of protocol patterns

(In the interest of full disclosure, I should say that this paper was
published by my company and presented at a conference we organise. I
have not been involved in the research myself.)

Alexandru Trifan and Andrei Husanu, two researchers from Bitdefender in
Romania, published a paper in which they looked at IP packet sizes in
SMTP connections and how oddities in the sizes could help spot a
spammer. I thought it is a neat idea, that may have applications in
other areas of security.

The full paper is here:
https://www.virusbtn.com/virusbulletin/archive/2014/11/vb201411-protocol-patterns

Here's a video of the conference presentation:
https://www.youtube.com/watch?v=cNny5i0eQ-8

Martijn.

-
This is the asrg mailing list.  To change your subscription settings, see
http://lists.services.net/cgi-bin/mj_wwwusr/domain=lists.gurus.org