Thumbnail
Access Restriction
Subscribed

Author Yu, Fang ♦ Wobber, Ted ♦ Achan, Kannan ♦ Goldszmidt, Moises ♦ Gillum, Eliot ♦ Xie, Yinglian
Source ACM Digital Library
Content type Text
Publisher Association for Computing Machinery (ACM)
File Format PDF
Language English
Subject Domain (in DDC) Computer science, information & general works ♦ Data processing & computer science
Subject Keyword Dynamic ip addresses ♦ Dhcp ♦ Ip volatility ♦ Entropy ♦ Spam detection
Abstract This paper introduces a novel algorithm, UDmap, to identify dynamically assigned IP addresses and analyze their dynamics pattern. UDmap is fully automatic, and relies only on application-level server logs. We applied UDmap to a month-long Hotmail user-login trace and identified a significant number of dynamic IP addresses - more than 102 million. This suggests that the fraction of IP addresses that are dynamic is by no means negligible. Using this information in combination with a three-month Hotmail email server log, we were able to establish that 95.6% of mail servers setup on the dynamic IP addresses in our trace sent out solely spam emails. Moreover, these mail servers sent out a large amount of spam - amounting to 42.2% of all spam emails received by Hotmail. These results highlight the importance of being able to accurately identify dynamic IP addresses for spam filtering. We expect similar benefits to arise for phishing site identification and botnet detection. To our knowledge, this is the first successful attempt to automatically identify and understand IP address dynamics.
Description Affiliation: Microsoft Research, Mountain View, CA (Xie, Yinglian; Yu, Fang; Achan, Kannan; Gillum, Eliot; Goldszmidt, Moises; Wobber, Ted)
Age Range 18 to 22 years ♦ above 22 year
Educational Use Research
Education Level UG and PG
Learning Resource Type Article
Publisher Date 1993-07-01
Publisher Place New York
Journal ACM SIGCOMM Computer Communication Review (CCRV)
Volume Number 37
Issue Number 4
Page Count 12
Starting Page 301
Ending Page 312


Open content in new tab

   Open content in new tab
Source: ACM Digital Library