Transcript Spam presentation slides

SPAM!
• From Wikipedia:
• http://en.wikipedia.org/wiki/Spam_%28electronic%29
Spam (electronic):
“…the abuse of electronic messaging systems
to send unsolicited bulk messages, which are
almost universally undesired”
How did spam get its name?
• …probably from Monty Python’s “Spam
skit”, according to Electronic Freedom
Foundation chairman Brad Templeton:
http://www.templetons.com/brad/spamterm.ht
ml
• (audio version of skit available from:
• http://www.detritus.org/spam/skit.html
Kinds of spam
• (source: http://en.wikipedia.org/wiki/Spam_%28electronic%29
• Email spam is most widely recognized, but not
the only kind…
• Also:
–
–
–
–
–
–
Instant messaging spam
Usenet newsgroup spam
Web search engine spam
Spam in blogs
Mobile phone messaging spam
Junk fax transmissions
In absolute numbers…
• source: http://en.wikipedia.org/wiki/E-mail_spam
– 1978 - An e-mail spam is sent to 600 addresses.
– 1994 - First large-scale spam sent to 6000
newsgroups, reaching millions of people.
– 2005 - (June) 30 billion per day
– 2006 - (June) 55 billion per day
– 2006 - (December) 85 billion per day
– 2007 - (February) 90 billion per day
In absolute numbers…
• source: http://en.wikipedia.org/wiki/E-mail_spam
• MAAWG - Messaging Anti-Abuse Working
Group, www.maawg.org :
• Estimates that 80-85% of incoming mail is
“abusive email”, as of the last quarter of
2005
• (sample size: > 100 million mailboxes!)
In absolute numbers…
• Source: Raw email stats for HSU, 2-12-2007
• HSU receives, daily: ~250,000 incoming mail
messages
• 85% (~212,500) are BLOCKED
• 5% (~12,500) are QUARANTINED
• 10% (~25,000) are passed to user’s mailboxes
• (10,000-12,000 active e-mail accounts)
Why is this a problem?
Discuss!
What can you DO about it?
• Sources:
– US-CERT Cyber Security Tip ST04-007,
http://www.us-cert.gov/cas/tips/ST04-007.html
– Consumer Reports Sept. 2006, “Cyber
Insecurity”
What can you DO about it?
• Don’t give out your e-mail address
arbitrarily
• Check privacy policies
• Be aware of options selected by default
[negative check-offs]
• Use filters/antispam software
What can you DO about it?
• DON’T follow links in spam messages!
• Disable automatic downloading of graphics
in HTML e-mail
• Consider opening an additional e-mail
account
• Don’t spam others!!