April 12, 2004

E-mail fingerprinting attacks bounce storms

Total Protection 2.0 generates signature for outbound messages

E-mail provider Everyone.net is trying to head off one type of spam with an encryption technology designed to create a unique signature for each outbound e-mail message.

The Total Protection 2.0 e-mail protection service zeros in on bounce storms, in which e-mail users who have had their e-mail address stolen by spammers or e-mail worms receive a flood of returned messages.

The service, being launched this week at the ISPCon conference in Washington, includes a technology dubbed Email Fingerprint, which adds an extension header to each outbound e-mail message. That header will contain a unique signature, created with a symmetric encryption key and based on information such as the e-mail user's ID, the time stamp for the e-mail and more, said Wayne Lewis, Everyone.net CTO.

External e-mail servers typically return the header, including the new fingerprint extension, and often a portion of the original message. That allows Everyone.net to search bounced messages for the signature to determine whether they came from an Everyone.net user, or are bogus bounce messages from a spammer, Lewis said.

The new technology is not a cure-all, but will help shield Everyone.net's customers from being inundated with rejection notifications for e-mail messages they never sent, according to Josh Mailman, vice president of sales and marketing at Everyone.net

Bounced messages are a big problem, according to John Levine of the Internet Research Task Force's Anti-Spam Research Group.

Levine, who runs an anti-spam service called AbuseNet, receives around 10,000 or 20,000 a day. However, Email Fingerprint might not reliably let legitimate bounce messages through to e-mail users, he said.

E-mail server products vary widely in what content from original e-mail messages they return when they issue a bounce notice. That variance could mean that Email Fingerprint is stripped out or altered by some programs, causing it to be dropped by Everyone.net's servers.

Close

On Twitter now

Applications

Powered by Twitter

On Twitter now

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »

Sign up to receive Applications Resource Alerts

Subscribe to the Applications Newsletter

Stay informed of the latest news and technologies around application, project and performance management.

White paper

Turn Your IT Department into a Lean Machine

Like any valuable resource, IT is a terrible thing to waste. But by applying the same lean techniques that have been used to streamline manufacturing processes, IT departments can reduce costs, improve performance and better manage resources.

Download now! »

Podcast

Economy Makes Automation a Must-Have Tech for 2009

Stephen Elliot, vice president of strategy for CA's Infrastructure Management and Data Center Automation business unit, explains why difficult economic times drive the need for simplified management capabilities and advanced automation tools.

Listen now! »

White paper

What You Need to Know About Virtual Infrastructure Management - Now

According to a recent study CA conducted with 300 CIOs and top IT executives, 64 percent of respondents say they've already invested in virtualization, and the other 36 percent reported that they plan to invest in virtualization.

Download now! »

Webcast

Leveraging Virtualization and Process Automation

In this video learn about process automation in a virtualized world. How CA and VMware are enabling enterprise datacenter automation.

View now! »
©1994-2009 Infoworld, Inc.