Metrics for measuring ISP badness: The case of spam

Benjamin Johnson; John Chuang; Jens Grossklags; Nicolas Christin

doi:10.1007/978-3-642-32946-3_8

Metrics for measuring ISP badness: The case of spam

Benjamin Johnson, John Chuang, Jens Grossklags, Nicolas Christin

Penn State University Park

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

5 Scopus citations

Abstract

We consider the problem of ISP targeting for spam prevention through disconnection. Any such endeavor has to rely on adequate metrics that consider both the badness of an ISP as well as the risk of collateral damage. We propose a set of metrics that combines the two. Specifically, the metrics compare each ISP's "spamcount" with its "disconnectability". We offer a concrete methodological approach to compute these metrics, and then illustrate themethodology using datasets involving spam statistics and autonomous system relationships. This analysis represents the first step in a broader program to assess the viability of economic countermeasures to spam and other types of malicious activity on the Internet.

Original language	English (US)
Title of host publication	Financial Cryptography and Data Security - 16th International Conference, FC 2012, Revised Selected Papers
Pages	89-97
Number of pages	9
DOIs	https://doi.org/10.1007/978-3-642-32946-3_8
State	Published - Sep 11 2012
Event	16th International Conference on Financial Cryptography and Data Security, FC 2012 - Kralendijk, Bonaire, Netherlands Duration: Feb 27 2012 → Mar 2 2012

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	7397 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Other

Other	16th International Conference on Financial Cryptography and Data Security, FC 2012
Country/Territory	Netherlands
City	Kralendijk, Bonaire
Period	2/27/12 → 3/2/12

All Science Journal Classification (ASJC) codes

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-3-642-32946-3_8

Cite this

Johnson, B., Chuang, J., Grossklags, J., & Christin, N. (2012). Metrics for measuring ISP badness: The case of spam. In Financial Cryptography and Data Security - 16th International Conference, FC 2012, Revised Selected Papers (pp. 89-97). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 7397 LNCS). https://doi.org/10.1007/978-3-642-32946-3_8

Johnson, Benjamin ; Chuang, John ; Grossklags, Jens et al. / Metrics for measuring ISP badness : The case of spam. Financial Cryptography and Data Security - 16th International Conference, FC 2012, Revised Selected Papers. 2012. pp. 89-97 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{16fee6aa410848c1bbeae4e50a23fa3c,

title = "Metrics for measuring ISP badness: The case of spam",

abstract = "We consider the problem of ISP targeting for spam prevention through disconnection. Any such endeavor has to rely on adequate metrics that consider both the badness of an ISP as well as the risk of collateral damage. We propose a set of metrics that combines the two. Specifically, the metrics compare each ISP's {"}spamcount{"} with its {"}disconnectability{"}. We offer a concrete methodological approach to compute these metrics, and then illustrate themethodology using datasets involving spam statistics and autonomous system relationships. This analysis represents the first step in a broader program to assess the viability of economic countermeasures to spam and other types of malicious activity on the Internet.",

author = "Benjamin Johnson and John Chuang and Jens Grossklags and Nicolas Christin",

year = "2012",

month = sep,

day = "11",

doi = "10.1007/978-3-642-32946-3_8",

language = "English (US)",

isbn = "9783642329456",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

pages = "89--97",

booktitle = "Financial Cryptography and Data Security - 16th International Conference, FC 2012, Revised Selected Papers",

note = "16th International Conference on Financial Cryptography and Data Security, FC 2012 ; Conference date: 27-02-2012 Through 02-03-2012",

}

Johnson, B, Chuang, J, Grossklags, J & Christin, N 2012, Metrics for measuring ISP badness: The case of spam. in Financial Cryptography and Data Security - 16th International Conference, FC 2012, Revised Selected Papers. Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 7397 LNCS, pp. 89-97, 16th International Conference on Financial Cryptography and Data Security, FC 2012, Kralendijk, Bonaire, Netherlands, 2/27/12. https://doi.org/10.1007/978-3-642-32946-3_8

Metrics for measuring ISP badness: The case of spam. / Johnson, Benjamin; Chuang, John; Grossklags, Jens et al.
Financial Cryptography and Data Security - 16th International Conference, FC 2012, Revised Selected Papers. 2012. p. 89-97 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 7397 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Metrics for measuring ISP badness

T2 - 16th International Conference on Financial Cryptography and Data Security, FC 2012

AU - Johnson, Benjamin

AU - Chuang, John

AU - Grossklags, Jens

AU - Christin, Nicolas

PY - 2012/9/11

Y1 - 2012/9/11

N2 - We consider the problem of ISP targeting for spam prevention through disconnection. Any such endeavor has to rely on adequate metrics that consider both the badness of an ISP as well as the risk of collateral damage. We propose a set of metrics that combines the two. Specifically, the metrics compare each ISP's "spamcount" with its "disconnectability". We offer a concrete methodological approach to compute these metrics, and then illustrate themethodology using datasets involving spam statistics and autonomous system relationships. This analysis represents the first step in a broader program to assess the viability of economic countermeasures to spam and other types of malicious activity on the Internet.

AB - We consider the problem of ISP targeting for spam prevention through disconnection. Any such endeavor has to rely on adequate metrics that consider both the badness of an ISP as well as the risk of collateral damage. We propose a set of metrics that combines the two. Specifically, the metrics compare each ISP's "spamcount" with its "disconnectability". We offer a concrete methodological approach to compute these metrics, and then illustrate themethodology using datasets involving spam statistics and autonomous system relationships. This analysis represents the first step in a broader program to assess the viability of economic countermeasures to spam and other types of malicious activity on the Internet.

UR - http://www.scopus.com/inward/record.url?scp=84865833383&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84865833383&partnerID=8YFLogxK

U2 - 10.1007/978-3-642-32946-3_8

DO - 10.1007/978-3-642-32946-3_8

M3 - Conference contribution

AN - SCOPUS:84865833383

SN - 9783642329456

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 89

EP - 97

BT - Financial Cryptography and Data Security - 16th International Conference, FC 2012, Revised Selected Papers

Y2 - 27 February 2012 through 2 March 2012

ER -

Johnson B, Chuang J, Grossklags J, Christin N. Metrics for measuring ISP badness: The case of spam. In Financial Cryptography and Data Security - 16th International Conference, FC 2012, Revised Selected Papers. 2012. p. 89-97. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). doi: 10.1007/978-3-642-32946-3_8

Metrics for measuring ISP badness: The case of spam

Abstract

Publication series

Other

All Science Journal Classification (ASJC) codes

Access to Document

Other files and links

Fingerprint

Cite this