TY - GEN
T1 - Taster's choice
T2 - 2012 ACM Internet Measurement Conference, IMC 2012
AU - Pitsillidis, Andreas
AU - Kanich, Chris
AU - Voelker, Geoffrey M.
AU - Levchenko, Kirill
AU - Savage, Stefan
PY - 2012
Y1 - 2012
N2 - E-mail spam has been the focus of a wide variety of measurement studies, at least in part due to the plethora of spam data sources available to the research community. However, there has been little attention paid to the suitability of such data sources for the kinds of analyses they are used for. In spite of the broad range of data available, most studies use a single "spam feed" and there has been little examination of how such feeds may differ in content. In this paper we provide this characterization by comparing the contents of ten distinct contemporaneous feeds of spam-advertised domain names. We document significant variations based on how such feeds are collected and show how these variations can produce differences in findings as a result.
AB - E-mail spam has been the focus of a wide variety of measurement studies, at least in part due to the plethora of spam data sources available to the research community. However, there has been little attention paid to the suitability of such data sources for the kinds of analyses they are used for. In spite of the broad range of data available, most studies use a single "spam feed" and there has been little examination of how such feeds may differ in content. In this paper we provide this characterization by comparing the contents of ten distinct contemporaneous feeds of spam-advertised domain names. We document significant variations based on how such feeds are collected and show how these variations can produce differences in findings as a result.
KW - domain blacklists
KW - measurement
KW - spam e-mail
UR - http://www.scopus.com/inward/record.url?scp=84870882181&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84870882181&partnerID=8YFLogxK
U2 - 10.1145/2398776.2398821
DO - 10.1145/2398776.2398821
M3 - Conference contribution
AN - SCOPUS:84870882181
SN - 9781450317054
T3 - Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC
SP - 427
EP - 440
BT - IMC 2012 - Proceedings of the ACM Internet Measurement Conference
Y2 - 14 November 2012 through 16 November 2012
ER -