Stanford Computer Security Lab. TrackBack Spam: Abuse and Prevention. Elie Bursztein, Peifung E. Lam, John C. Mitchell Stanford University
|
|
|
- Harvey Wilcox
- 8 years ago
- Views:
Transcription
1 Abuse and Prevention Stanford University Stanford Computer Security Lab TrackBack Spam:
2 Introduction Many users nowadays post information on cloud computing sites Sites sometimes need to link to each other However, cross-referencing can become a vehicle for abuses (such as spamming) This calls for a study of security issues on cross-referencing between cloud sites
3 Introduction (cont.) Blog cross-referencing offers one such example Blogs have automated mechanisms, called Linkbacks, to facilitate cross-referencing, and this has been exploited by spammers
4 Introduction (cont.) We carried out a 1-year study of a major spamming platform, and analyzed 10 million spams Gained insight on attacker s method of operation and resources Propose a defense against blog spams
5 Outline Blog Spam Experiment setup : Honey blog! Results Defense
6 General Stats on Blogs Source: universalmccann 184 Million blogs world-wide 73% of internet users have read a blog 50% post comments
7 Common Blog Platforms
8 Why blogs are special Blog are designed around the idea of user pushing content As an example, Linkbacks allow cross-linking between blogs. More specifically, when blog A cites another blog B, a notification of the citation can be sent to B, which can then link back to blog A automatically.
9 TrackBack - a type of LinkBack TrackBack URL Auto discovery of TrackBack URL Trigger The URL of TrackBack capture script Resource Description Framework (RDF) Code on blog site extracts citations to other blogs Notification HTTP Post
10 TrackBack URL and Blog Comments
11 Trackback Post variables [title] => Title of the referencing blog entry [url] => [excerpt] => Post excerpt... [blog_name] => Mysite blog
12 Problem Trackbacks are used to push spam do malevolent Search Engine Optimization One blog spam can reach thousand of users
13 How big is the problem? Source: Akismet.com Blog Spam
14 Honey Blog A blog acting as a potential target for spamming Instrumented our blog site and analyzed spams
15 Setup Hosted a real blog (dotclear) with a modified TrackBack mechanism Record TrackBacks Passive fingerprinting Sample the lure site
16 Activity Trackback Spams Number of Spams Mar 1, 2007 Mar 18, 2007 Apr 4, 2007 Apr 21, Mar-Apr 2007 May 8, 2007 Jun 11, 2007 Jun 28, 2007 Jul 15, 2007 Aug 1, 2007 Aug 18, 2007 Sep 4, 2007 May-Jun 2007 May 25, 2007 Oct 25, 2007 Nov 11, 2007 Nov 28, 2007 Dec 15, 2007 Jan 1, 2008 Jan 18, 2008 Feb 4, 2008 July 2007-Apr 2008 July 2007-Apr 2008 Sep 21, 2007 Oct 8, 2007 Feb 21, 2008 Mar 9, 2008 Mar 26, 2008 Apr 12, 2008 Apr 29, 2008
17 Unique Spammer IPs 2800 Unique Spammer IPs 2100 Unique IPs Mar 1, 2007 Mar 18, 2007 Apr 4, 2007 Apr 21, 2007 May 8, 2007 May 25, 2007 Jun 28, 2007 Jul 15, 2007 Aug 1, 2007 Aug 18, 2007 Mar-Apr Mar-Apr May-Jun May-Jun Jun 11, 2007 Sep 21, 2007 Oct 8, 2007 Oct 25, 2007 Nov 11, 2007 Sep 4, 2007 Nov 28, 2007 Dec 15, 2007 Jan 1, 2008 Jan 18, 2008 Feb 4, 2008 Feb 21, 2008 Mar 9, 2008 July 2007-Apr 2008 July 2007-Apr 2008 Mar 26, 2008 Apr 12, 2008 Apr 29, 2008
18 IP Geolocation Distribution 100 IP Geolocation Distribution 75 Percentage % Mar 1, 2007 Mar 10, 2007 Mar-Apr 2007 May-Jun 2007 Mar 19, 2007 Mar 28, 2007 Apr 6, 2007 Apr 15, 2007 Apr 24, 2007 May 3, 2007 May 12, 2007 May 21, 2007 May 30, 2007 Jun 8, 2007 Russia USA Germany UK Russia USA Germany UK Jun 17, 2007 Jun 2007-Apr 2008 July Apr 2008
19 Max Uptime of Spamming IPs by Day Max Uptime of All Spamming IPs by Day 9000 Uptime in Hours Jan 4, 2008 Jan 9, 2008 Jan 14, 2008 Jan 19, 2008 Jan 24, 2008 Jan 29, 2008 Feb 3, 2008 Feb 8, Feb 13, 2008 Feb 18, 2008 Feb 23, 2008 Feb 28, 2008 Mar 4, 2008 Mar 9, 2008 Mar 14, 2008 Mar 19, 2008 Mar 24, 2008 Mar 29, 2008 Apr 3, 2008 Apr 8, 2008 Apr 13, 2008 Apr 18, 2008 Apr 23, 2008 January January February March March April 2008 Apr 28, 2008
20 User Agents in Spamming 100 User Agents in Spamming 75 Percentage % Mar-Apr May-Jun May-Jun Jul 2007-Apr 2008 July 2007-Apr Mar 1, 2007 Apr 1, 2007 May 1, 2007 Jun 1, 2007 Jul 1, 2007 Aug 1, 2007 Sep 1, 2007 Oct 1, 2007 Nov 1, 2007 Dec 1, 2007 Jan 1, 2008 Feb 1, 2008 Mar 1, 2008 Apr 1, 2008 WordPress/1.9 WordPress 1.9 WordPress/2.0 WordPress/2.1.2 WordPress WordPress 2.1 IE 6 XP Firefox Opera
21 Trackback content Random keywords revolving around adult theme Blog URLs in the Trackback pings are of the form random-words.nx.cn
22 Trackback Post sample Apparent Bayesian poisoning against spam filters: [title] => Please teacher hentai pics [url] => [excerpt] => pics Please teacher hentai pics... [blog_name] =>Please teacher hentai pics
23 Created using Wordle
24 Spam Workflow Servers submit Trackback spam Spam points to Social network site exploited as relay site obscufaction Relay site links to lure sites with purported adult content obscufaction Lure site badgers user to download fake video plugins hosted on malware site
25 Relay URL a community hosting site at Ningxia province, PRC Exploited by attackers as relay The hosting site started to use CAPTCHA (some in Chinese) around May, 2008 We observed a corresponding drop of spam activities using them as relay
26
27 Behind the relay Lead to various sites selectedclipz.com, gogomovz.com (purported adult site) vidzwares.com (malware distribution site) Need an id in the url download.php?id=429
28 The Lure site
29 Whois Domain Name: GOGOMOVZ.COM Registrar: ONLINENIC, INC. Whois Server: whois.onlinenic.com Referral URL: Name Server: NS1.GOGOMOVZ.COM Name Server: NS2.GOGOMOVZ.COM. Updated Date: 22-oct-2008 Creation Date: 22-oct-2008 Expiration Date: 22-oct-2009 Registrant:... ul Beketova 3 Nijnii Novgorod,n/a,RUSSIAN FEDERATION
30 DNS analysis : related domains ns1.clipzsaloon.com ns1.clipztube.com ns1.freexxxmovz.com ns1.itunnelz.com ns1.vidzselector.com, and more...
31 Malware Binary flagged as TrojanDownloader:Win32/Zlob.gen!dll Trojan.Popuper.origin Downloader.Zlob.LI
32 TalkBack Designed a secure protocol: TalkBack Address the root of the problem: prevent spammers to post notifications Key ideas : Lightweight PKI Global rate limiting
33 Goals Sender authenticity Receiver authenticity Notification integrity Notification irrefutability
34 How it works Authority 1. Seed request 4. Talkback reporting Sender 2.Auto-Discovery 3. Talkback posting Receiver
35 Conclusion Linking between cloud sites can become a vehicle for spamming One such example is blog TrackBacks We did a 1 year study of a major blog spamming platform: 10 million spams analyzed Gained insight about TrackBack spam and spammers Provided us a basis to build better defense
36 Related work and alternative approaches TrackBack Validator [21] - Parsing sender page to find the link Reputation system IP Blacklisting Local rate limiting
37 Stanford Computer Security Lab Questions? Thank you!
TrackBack Spam: Abuse and Prevention
TrackBack Spam: Abuse and Prevention Elie Bursztein Stanford University elie@cs.stanford.edu Peifung E. Lam* Stanford University pflam@cs.stanford.edu John C. Mitchell* Stanford University mitchell@cs.stanford.edu
AT&T Global Network Client for Windows Product Support Matrix January 29, 2015
AT&T Global Network Client for Windows Product Support Matrix January 29, 2015 Product Support Matrix Following is the Product Support Matrix for the AT&T Global Network Client. See the AT&T Global Network
Case 2:08-cv-02463-ABC-E Document 1-4 Filed 04/15/2008 Page 1 of 138. Exhibit 8
Case 2:08-cv-02463-ABC-E Document 1-4 Filed 04/15/2008 Page 1 of 138 Exhibit 8 Case 2:08-cv-02463-ABC-E Document 1-4 Filed 04/15/2008 Page 2 of 138 Domain Name: CELLULARVERISON.COM Updated Date: 12-dec-2007
COMPARISON OF FIXED & VARIABLE RATES (25 YEARS) CHARTERED BANK ADMINISTERED INTEREST RATES - PRIME BUSINESS*
COMPARISON OF FIXED & VARIABLE RATES (25 YEARS) 2 Fixed Rates Variable Rates FIXED RATES OF THE PAST 25 YEARS AVERAGE RESIDENTIAL MORTGAGE LENDING RATE - 5 YEAR* (Per cent) Year Jan Feb Mar Apr May Jun
COMPARISON OF FIXED & VARIABLE RATES (25 YEARS) CHARTERED BANK ADMINISTERED INTEREST RATES - PRIME BUSINESS*
COMPARISON OF FIXED & VARIABLE RATES (25 YEARS) 2 Fixed Rates Variable Rates FIXED RATES OF THE PAST 25 YEARS AVERAGE RESIDENTIAL MORTGAGE LENDING RATE - 5 YEAR* (Per cent) Year Jan Feb Mar Apr May Jun
Analysis One Code Desc. Transaction Amount. Fiscal Period
Analysis One Code Desc Transaction Amount Fiscal Period 57.63 Oct-12 12.13 Oct-12-38.90 Oct-12-773.00 Oct-12-800.00 Oct-12-187.00 Oct-12-82.00 Oct-12-82.00 Oct-12-110.00 Oct-12-1115.25 Oct-12-71.00 Oct-12-41.00
Enhanced Vessel Traffic Management System Booking Slots Available and Vessels Booked per Day From 12-JAN-2016 To 30-JUN-2017
From -JAN- To -JUN- -JAN- VIRP Page Period Period Period -JAN- 8 -JAN- 8 9 -JAN- 8 8 -JAN- -JAN- -JAN- 8-JAN- 9-JAN- -JAN- -JAN- -JAN- -JAN- -JAN- -JAN- -JAN- -JAN- 8-JAN- 9-JAN- -JAN- -JAN- -FEB- : days
Domain Name Abuse Detection. Liming Wang
Domain Name Abuse Detection Liming Wang Outline 1 Domain Name Abuse Work Overview 2 Anti-phishing Research Work 3 Chinese Domain Similarity Detection 4 Other Abuse detection ti 5 System Information 2 Why?
Deep Security/Intrusion Defense Firewall - IDS/IPS Coverage Statistics and Comparison
Deep Security/Intrusion Defense Firewall - IDS/IPS Trend Micro, Incorporated A technical brief summarizing vulnerability coverage provided by Deep Security and Intrusion Defense Firewall. The document
Deep Security Intrusion Detection & Prevention (IDS/IPS) Coverage Statistics and Comparison
Deep Security Intrusion Detection & Prevention (IDS/IPS) Trend Micro, Incorporated A technical brief summarizing vulnerability coverage provided by Deep Security. The document also outlines a comparison
Using big data analytics to identify malicious content: a case study on spam emails
Using big data analytics to identify malicious content: a case study on spam emails Mamoun Alazab & Roderic Broadhurst Mamoun.alazab@anu.edu.au http://cybercrime.anu.edu.au 2 Outline Background Cybercrime
The Latest Internet Threats to Affect Your Organisation. Tom Gillis SVP Worldwide Marketing IronPort Systems, Inc.
The Latest Internet Threats to Affect Your Organisation Tom Gillis SVP Worldwide Marketing IronPort Systems, Inc. Agenda Spam Trends Staying Ahead Blended Threats Spam Trends What Do Dick Cheney & Bill
ACTIVE MICROSOFT CERTIFICATIONS:
Last Activity Recorded : May 30, 2014 Microsoft Certification ID : 375009 SUSANNE SCHNEIDER KAISERSTRASSE 53 REUTLINGEN, 72764 DE SUSANNE.SCHNEIDER@KIT-KOM.DE *Charter- Certification that was achieved
Ashley Institute of Training Schedule of VET Tuition Fees 2015
Ashley Institute of Training Schedule of VET Fees Year of Study Group ID:DECE15G1 Total Course Fees $ 12,000 29-Aug- 17-Oct- 50 14-Sep- 0.167 blended various $2,000 CHC02 Best practice 24-Oct- 12-Dec-
How To Get Rid Of A Phish Locker On A Computer (For A Bank)
PHISH LOCKERS OUT IN THE WILD August 2013 RSA researchers have been increasingly witnessing the activity of highly targeted Trojans, dubbed Phish Lockers, used at the hands of cybercriminals to steal credentials.
CENTERPOINT ENERGY TEXARKANA SERVICE AREA GAS SUPPLY RATE (GSR) JULY 2015. Small Commercial Service (SCS-1) GSR
JULY 2015 Area (RS-1) GSR GSR (LCS-1) Texarkana Incorporated July-15 $0.50690/Ccf $0.45450/Ccf $0.00000/Ccf $2.85090/MMBtu $17.52070/MMBtu Texarkana Unincorporated July-15 $0.56370/Ccf $0.26110/Ccf $1.66900/Ccf
PHISHING IN SEASON TAX TIME MALWARE, PHISHING AND FRAUD
PHISHING IN SEASON TAX TIME MALWARE, PHISHING AND FRAUD April 2013 As cybercriminals will have it, phishing attacks are quite the seasonal trend. It seems that every April, after showing a slight decline
Dragonfly: Energy Companies Under Sabotage Threat Symantec Security Response
Dragonfly: Energy Companies Under Sabotage Threat Symantec Security Response Dragonfly: Western Energy Companies Under Sabotage Threat 1 What is Dragonfly? Ongoing cyberespionage campaign Targeting the
How To Get A Certificate From Ms.Net For A Server Server
Last Activity Recorded : December 19, 2014 Microsoft Certification ID : 2665612 MARC GROTE Wittorfer Strasse 4 Bardowick, Lower Saxony 21357 DE grotem@it-training-grote.de ACTIVE MICROSOFT CERTIFICATIONS:
Deep Security Vulnerability Protection Summary
Deep Security Vulnerability Protection Summary Trend Micro, Incorporated This documents outlines the process behind rules creation and answers common questions about vulnerability coverage for Deep Security
CAFIS REPORT 2015.10
CAFIS REPORT 2015.10 INDEX Message CAFIS Inbound 03-06 07-08 CAFIS Arch 09-10 CAFIS Brain 11-12 CAFIS Global 13-14 What We Do 15-16 About CAFIS 17-18 Services for Member Stores 19-34 Services for Card
Consumer ID Theft Total Costs
Billions Consumer and Business Identity Theft Statistics Business identity (ID) theft is a growing crime and is a growing concern for state filing offices. Similar to consumer ID theft, after initially
SPAM: 101 Cause and Effect
SPAM: 101 Cause and Effect Table of Contents Background: JARING SPAM 101 Effects Lesson Learned Challenges and Propositions 1 Part I: Background on JARING (We're the good guys.) What is JARING? The first
ACTIVE MICROSOFT CERTIFICATIONS:
Last Activity Recorded : August 30, 2012 Microsoft Certification ID : 30999 BERT VAN HOVE BARON EMPAINLAAN 68 MECHELEN, 2800 BE bert@road2result.be ACTIVE MICROSOFT CERTIFICATIONS: Microsoft Certified
Long Live Hosting! Use Solution-based Offers to Re-position Your Business and Reach New Audiences. 2014 Parallels IP Holdings GmbH
Long Live Hosting! Use Solution-based Offers to Re-position Your Business and Reach New Audiences 2014 Parallels IP Holdings GmbH 2 3 4 300K New Webservers were added in 2013 350000 300000 250000 200000
ACTIVE MICROSOFT CERTIFICATIONS:
Last Activity Recorded : August 04, 2011 Microsoft Certification ID : 483228 KENT NORDSTROM Asbergsvagen 27 Soderhamn, 82637 SW kent@xpservices.se ACTIVE MICROSOFT CERTIFICATIONS: Microsoft Certified Solutions
Computing & Telecommunications Services Monthly Report March 2015
March 215 Monthly Report Computing & Telecommunications Services Monthly Report March 215 CaTS Help Desk (937) 775-4827 1-888-775-4827 25 Library Annex helpdesk@wright.edu www.wright.edu/cats/ Last Modified
When Reputation is Not Enough: Barracuda Spam Firewall Predictive Sender Profiling. White Paper
When Reputation is Not Enough: Barracuda Spam Firewall Predictive Sender Profiling White Paper As spam continues to evolve, Barracuda Networks remains committed to providing the highest level of protection
BUGAT TROJAN JOINS THE MOBILE REVOLUTION
BUGAT TROJAN JOINS THE MOBILE REVOLUTION June 2013 RSA researchers analyzing Bugat Trojan attacks have recently learned that Bugat s developers managed to develop and deploy mobile malware designed to
Cisco & Big Data Security
Cisco & Big Data Security 巨 量 資 料 的 傳 輸 保 護 Joey Kuo Borderless Networks Manager hskuo@cisco.com The any-to-any world and the Internet of Everything is an evolution in connectivity and collaboration that
When Reputation is Not Enough: Barracuda Spam & Virus Firewall Predictive Sender Profiling
When Reputation is Not Enough: Barracuda Spam & Virus Firewall Predictive Sender Profiling As spam continues to evolve, Barracuda Networks remains committed to providing the highest level of protection
Evolving email threats and counter technology
Evolving email threats and counter technology James Todd IronPort Systems Agenda The State of SPAM New Spamming Techniques Predicative Security Rebuilding Trust in Email Zombies Execute Email Attacks Viruses
The Japanese Experience Countering Spam ITU TELECOM WORLD 2006
The Japanese Experience Countering Spam ITU TELECOM WORLD 2006 8th December 2006 Shuji Sakuraba Copyright 2006 Present condition of spam in Japan - I 2004 Media Sent to mobiles 66 % Sent to PCs 34 % 2005
Whose IP Is It Anyways: Tales of IP Reputation Failures
Whose IP Is It Anyways: Tales of IP Reputation Failures SESSION ID: SPO-T07 Michael Hamelin Lead X-Force Security Architect IBM Security Systems @HackerJoe What is reputation? 2 House banners tell a story
Centers of Academic Excellence in Cyber Security (CAE-C) Knowledge Units Review
Centers of Academic Excellence in Cyber Security (CAE-C) Knowledge Units Review Review Process The Knowledge Unit (KU) Review Calendar divides the entire CAE-C KU list into 12 months for the purposes of
Choosing a Cell Phone Plan-Verizon
Choosing a Cell Phone Plan-Verizon Investigating Linear Equations I n 2008, Verizon offered the following cell phone plans to consumers. (Source: www.verizon.com) Verizon: Nationwide Basic Monthly Anytime
Market Assessment & Campaign SLA Calculator LOGO WE OPEN THE DOOR, SO YOU CAN CLOSE IT.
Market Assessment & Campaign SLA Calculator LOGO WE OPEN THE DOOR, SO YOU CAN CLOSE IT. Your Market Assessment Overview Your Inbound Market Assessment and Campaign SLA Calculator is broken down into several
P/T 2B: 2 nd Half of Term (8 weeks) Start: 25-AUG-2014 End: 19-OCT-2014 Start: 20-OCT-2014 End: 14-DEC-2014
2014-2015 SPECIAL TERM ACADEMIC CALENDAR FOR SCRANTON EDUCATION ONLINE (SEOL), MBA ONLINE, HUMAN RESOURCES ONLINE, NURSE ANESTHESIA and ERP PROGRAMS SPECIAL FALL 2014 TERM Key: P/T = Part of Term P/T Description
Equipping your Forecasting Toolkit to Account for Ongoing Changes
Equipping your Forecasting Toolkit to Account for Ongoing Changes Presented by: Roger Parlett Supply Chain Manager January 23, 2014 Overview Forecast Set-up Objectives of Creating a Forecast Identify Critical
P/T 2B: 2 nd Half of Term (8 weeks) Start: 26-AUG-2013 End: 20-OCT-2013 Start: 21-OCT-2013 End: 15-DEC-2013
2013-2014 SPECIAL TERM ACADEMIC CALENDAR FOR SCRANTON EDUCATION ONLINE (SEOL), MBA ONLINE, HUMAN RESOURCES ONLINE, NURSE ANESTHESIA and ERP PROGRAMS SPECIAL FALL 2013 TERM Key: P/T = Part of Term P/T Description
P/T 2B: 2 nd Half of Term (8 weeks) Start: 24-AUG-2015 End: 18-OCT-2015 Start: 19-OCT-2015 End: 13-DEC-2015
2015-2016 SPECIAL TERM ACADEMIC CALENDAR For Scranton Education Online (SEOL), Masters of Business Administration Online, Masters of Accountancy Online, Health Administration Online, Health Informatics
Using Web Analytics to Improve Marketing Performance
OCT 25 8:30 AM REGENT CONCURRENT SESSION Using Web Analytics to Improve Marketing Performance Speakers: Hinda Chalew, SVP, Marketing & Interactive Services, Staffing Industry Analysts Brad Smith, Director,
A!Team!Cymru!EIS!Report:!Growing!Exploitation!of!Small! OfCice!Routers!Creating!Serious!Risks!
ATeamCymruEISReport:GrowingExploitationofSmall OfCiceRoutersCreatingSeriousRisks PoweredbyTeamCymru sthreatintelligencegroup Page 1of 14www.team-cymru.com www.team-cymru.com Threat'Intelligence'Group EXECUTIVE
How To Protect Your Network From Threats From Your Network (For A Mobile) And From Your Customers (For An Enterprise)
Plugging the Holes in Mobile Security: The Rising Threat Jennifer M. Pigg, VP of Research, Yankee Group Nick Wade, Group Product Manager, Symantec June 2011 Copyright 2011. Yankee Group Research, Inc.
When Reputation is Not Enough. Barracuda Email Security Gateway s Predictive Sender Profiling. White Paper
When Reputation is Not Enough Barracuda Email Security Gateway s Predictive Sender Profiling White Paper As spam continues to evolve, Barracuda Networks remains committed to providing the highest level
DNS POISONING, AKA PHARMING, MAKES THE HEADLINES IN NOVEMBER S NEWS
DNS POISONING, AKA PHARMING, MAKES THE HEADLINES IN NOVEMBER S NEWS December 2011 November saw DNS Poisoning, aka Pharming, making the headlines on more than one occasion: To name a few, the online threat
March 2010 Report #39
March 2010 Report #39 Scam and phishing messages in February accounted for 19 percent of all spam, which is 2 percentage points lower than in January, but nevertheless an elevated level. Spammers continued
AgriLife Information Technology IT General Session January 2010
AgriLife Information Technology IT General Session January 2010 Agenda Topics Year in Review Enterprise IT Services Update FirstCall Overview and Next Steps Sophos Antivirus Initiative Update Information/
CentralNic Privacy Policy Last Updated: July 31, 2012 Page 1 of 12. CentralNic. Version 1.0. July 31, 2012. https://www.centralnic.
CentralNic Privacy Policy Last Updated: July 31, 2012 Page 1 of 12 CentralNic Privacy Policy Version 1.0 July 31, 2012 https://www.centralnic.com/ CentralNic Privacy Policy Last Updated: February 6, 2012
2015-16 BCOE Payroll Calendar. Monday Tuesday Wednesday Thursday Friday Jun 29 30 Jul 1 2 3. Full Force Calc
July 2015 CM Period 1501075 July 2015 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 August 2015 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26
Insurance and Banking Subcommittee
Insurance and Banking Subcommittee Citizens Depopulation Update September 16, 2015 Christine Ashburn VP Communications, Legislative and External Affairs 2 3 Depopulation Customer Communications 1. 40 days
Dealing with Big Data in Cyber Intelligence
Dealing with Big Data in Cyber Intelligence Greg Day Security CTO, EMEA, Symantec Session ID: HT-303 Session Classification: General Interest What will I take away from this session? What is driving big
ZNetLive Malware Monitoring
Introduction The criminal ways of distributing malware or malicious software online have gone through a change in past years. In place of using USB drives, attachments or disks to distribute viruses, hackers
Email Reputation Metrics Troubleshooter. Share it!
Email Reputation Metrics Troubleshooter page: 1 Email Reputation Metrics Troubleshooter Written By Dale Langley Dale has been working with clients to improve their email deliverability and response rates,
Resource Management Spreadsheet Capabilities. Stuart Dixon Resource Manager
Resource Management Spreadsheet Capabilities Stuart Dixon Resource Manager Purpose Single view of resource data Shows rolling demand vs supply for 14 months, 2 months back, current month, and 11 forward
REVERSE ENGINEERING THE AUTOMOTIVE PURCHASE FUNNEL KEN INSANA SENIOR MANAGER, CONSUMER RESEARCH
REVERSE ENGINEERING THE AUTOMOTIVE PURCHASE FUNNEL KEN INSANA SENIOR MANAGER, CONSUMER RESEARCH COMMON ASSUMPTIONS NONE OF THESE ARE TRUE 6 MONTHS Length of Purchase Process LINEAR Shape of Purchase Process
Microsoft Exchange 2003
Microsoft Exchange 2003 Configuration Guide Microsoft Exchange 2003 Configuration Guide Page 1 Table of Contents Introduction... 2 Document and naming conventions... 2 Outbound email protection... 3 SMTP
Proposal to Reduce Opening Hours at the Revenues & Benefits Coventry Call Centre
Proposal to Reduce Opening Hours at the Revenues & Benefits Coventry Call Centre Proposal To change the opening hours of the Revenues & Benefits Call Centre to 9am until 5pm Monday to Friday with effect
Spam Filtering at CERN Emmanuel Ormancey - 23 October 2002
Spam Filtering at CERN Emmanuel Ormancey - 23 October 2002 23 October 2002 Emmanuel Ormancey 1 Topics Statistics Current Spam filtering at CERN Products overview Selected solution How it works Exchange
CYBERSECURITY INESTIGATION AND ANALYSIS
CYBERSECURITY INESTIGATION AND ANALYSIS The New Crime of the Digital Age The Internet is not just the hotspot of all things digital and technical. Because of the conveniences of the Internet and its accessibility,
Executive Summary. McAfee Labs Threats Report: Third Quarter 2013
Executive Summary McAfee Labs Threats Report: Third Quarter Although summer can be a relatively slow season for cybercriminal activity (even the bad guys need a break occasionally), the third quarter of
Detailed guidance for employers
April 2015 3 Detailed guidance for employers Appendix A: Pay reference periods This document accompanies: Detailed guidance no. 3 Assessing the workforce Pay reference period calendars where the definition
How to Protect Your Dealership's Online Reputation
How to Protect Your Dealership's Online Reputation Legitimate tactics to build a positive profile, but also rebut and balance any negative reviews - How to fight back! With Brian Pasch CEO, Pasch Consulting
Using Open Source Software to Manage Policies and Clinical Guidelines. Library & Knowledge Service Derby Teaching Hospitals NHS Foundation Trust
Using Open Source Software to Manage Policies and Clinical Guidelines Library & Knowledge Service Derby Teaching Hospitals NHS Foundation Trust Overview Background Existing System. Requirements. Implementation
Reverse Transfer on a National Scale: Why? How?
Reverse Transfer on a National Scale: Why? How? Registrars and Provosts Meeting Charleston, West Virginia March 11, 2015 3/17/2015 1 What is reverse transfer? 3/17/2015 2 It s a big issue 3/17/2015 3 How
Agenda. John Veldhuis, Sophos The playing field Threats Mobile Device Management. Pagina 2
Mobile Security Agenda John Veldhuis, Sophos The playing field Threats Mobile Device Management Pagina 2 The Changing Mobile World Powerful devices Access everywhere Mixed ownership User in charge Powerful
Supervisor Instructions for Approving Web Time Entry
Supervisor Instructions for Approving Web Time Entry Time Approval Deadlines by Category Local 2110 Members members submit time by NOON on Monday of the pay week. Time should be approved no later than
https://mcp.microsoft.com/authenticate/mcpcredentials.aspx
M r ic o o s f t e C t r if ic t a io n D I : 1 0 0 5 8 3 6 Seite 1 von 12 Microsoft Certified Professional Transcript Last Activity Recorded : March 15, 2011 UDO HEUSCHMANN ACTIVE MICROSOFT CERTIFICATIONS:
Department of Public Welfare (DPW)
Department of Public Welfare (DPW) Office of Income Maintenance Electronic Benefits Transfer Card Risk Management Report Out-of-State Residency Review FISCAL YEAR 2012-2013 June 2013 (March, April and
JISC data.bris project & EPSRC Platform project: progress against workplan (October 2012)
Project Name : data.bris DBSG/5/2 JISC data.bris project & EPSRC Platform project: progress against workplan (October 2012) WORKPACKAGES Month: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 Oct 11 Nov Dec
Yandex: Webmaster Tools Overview and Guidelines
Yandex: Webmaster Tools Overview and Guidelines Agenda Introduction Register Features and Tools 2 Introduction What is Yandex Yandex is the leading search engine in Russia. It has nearly 60% market share
SpamTitan Outlook Addin V2.0
SpamTitan Outlook Addin V2.0 The SpamTitan Outlook Addin v2.0 allows users to do a varity of spam filtering management from the outlook client, including Report Spam and Ham messages to the SpamTitan Bayesian
Current counter-measures and responses by CERTs
Current counter-measures and responses by CERTs Jeong, Hyun Cheol hcjung@kisa.or.kr April. 2007 Contents I. Malware Trends in Korea II. Malware from compromised Web sites III. Case Study : Malware countermeasure
RadBlue Load Tester Version 6. [Released: 09 DEC 2009]
![RadBlue Load Tester Version 6. [Released: 09 DEC 2009]](/thumbs/27/11028632.jpg "RadBlue Load Tester Version 6. [Released: 09 DEC 2009]")
Version 6 [Released: 09 DEC 2009] In this release, we modified the database setup screen of the RLT installer to default to SQL server information (the recommended database). The Transcript has been modified
Japan s Countermeasures against Spam
Apr. 10, 2007 Japan s Countermeasures against Spam Hiroyo HIRAMATSU, Deputy Director, Telecommunications Consumer Policy Division, Telecommunications Bureau, Ministry of Internal Affairs and Communications,
Interest Rates. Countrywide Building Society. Savings Growth Data Sheet. Gross (% per annum)
Interest Rates (% per annum) Countrywide Building Society This is the rate of simple interest earned in a year (before deducting tax). Dividing by 12 gives the monthly rate of interest. Annual Equivalent
Accident & Emergency Department Clinical Quality Indicators
Overview This dashboard presents our performance in the new A&E clinical quality indicators. These 8 indicators will allow you to see the quality of care being delivered by our A&E department, and reflect
Architectural Services Data Summary March 2011
Firms Typically Small in Size According to the latest U.S. Census Survey of Business Owners, majority of the firms under the description Architectural Services are less than 500 in staff size (99.78%).
Comprehensive Email Filtering. Whitepaper
Comprehensive Email Filtering Whitepaper Email has undoubtedly become a valued communications tool among organizations worldwide. With frequent virus attacks and the alarming influx of spam, email loses
Intercept Anti-Spam Quick Start Guide
Intercept Anti-Spam Quick Start Guide Software Version: 6.5.2 Date: 5/24/07 PREFACE...3 PRODUCT DOCUMENTATION...3 CONVENTIONS...3 CONTACTING TECHNICAL SUPPORT...4 COPYRIGHT INFORMATION...4 OVERVIEW...5
Quick Start Guide. active directory maintenance checklist
active directory maintenance checklist Quick Start Guide This active directory maintenance checklist is in the form of independently produced user guides. ACTIVE DIRECTORY MAINTENANCE CHECKLIST Once you
Who will win the battle - Spammers or Service Providers?
Who will win the battle - Spammers or Service Providers? Pranaya Krishna. E* Spam Analyst and Digital Evidence Analyst, TATA Consultancy Services Ltd. (pranaya.enugulapally@tcs.com) Abstract Spam is abuse
2016 Examina on dates
Please note the following informa on: The following exams are available throughout the year: Please click on the exam for which you wish to see the dates. When you have finished, you can select to return
Freedom of Information Request Reference No: I note you seek access to the following information:
Freedom of Information Request Reference No: I note you seek access to the following information: 1. How many incidents in the UK have the police been called to because of people being drug and disorderly
HIDING THE NETWORK BEHIND THE NETWORK. BOTNET PROXY BUSINESS MODEL Alexandru Maximciuc, Cristina Vatamanu & Razvan Benchea Bitdefender, Romania
HIDING THE NETWORK BEHIND THE NETWORK. BOTNET PROXY BUSINESS MODEL Alexandru Maximciuc, Cristina Vatamanu & Razvan Benchea Bitdefender, Romania Email {amaximciuc, cvatamanu, rbenchea}@ bitdefender.com
Secure Your Mobile Workplace
Secure Your Mobile Workplace Sunny Leung Senior System Engineer Symantec 3th Dec, 2013 1 Agenda 1. The Threats 2. The Protection 3. Q&A 2 The Mobile Workplaces The Threats 4 Targeted Attacks up 42% in
Comparing share-price performance of a stock
Comparing share-price performance of a stock A How-to write-up by Pamela Peterson Drake Analysis of relative stock performance is challenging because stocks trade at different prices, indices are calculated
2015 Examination dates
Please note the following information: The following exams are available throughout the year: BULATS Paper-based: Please click on the exam for which you wish to see the dates. When you have finished, you
BILD and WELT: Two successful Paid Content Strategies Capital Markets Day Berlin, December 10, 2014. Donata Hopfen, Publishing Director BILD Group
BILD and WELT: Two successful Paid Content Strategies Capital Markets Day Berlin, December 10, 2014 Donata Hopfen, Publishing Director BILD Group Paid content is key to Axel Springer s strategy Start of
2013-2014. oct 03 / 2013 nov 12 / 2013. oct 05 / 2013. oct 07 / 2013. oct 21 / 2013. oct 24 / 2013. nov 07 / 2013 nov 14 / 2013.
2013- ACADEMIC CALENDARS SOUTH UNIVERSITY 2013- ACADEMIC CALENDAR Fall 2013 Winter Spring Summer New Student Orientation Session II (Mid ) oct 03 / 2013 nov 12 / 2013 jan 09 / feb 18 / apr 03 / may 13
Email David-Kovarik@northwestern.edu Phone 847-467-5930 Fax 847-467-6000
Information Technology Information and Systems Security/Compliance Northwestern University 1800 Sherman Av Suite 209 Evanston, IL 60201 Email David-Kovarik@northwestern.edu Phone 847-467-5930 Fax 847-467-6000
Statistics for www.brageboden.se (2008-08)
Statistics for www.brageboden.se (-08) Sida 1 av 5-08-10 Last Update: 10 Aug - 10:39 Reported period: Aug OK Summary Reported period Month Aug First visit 01 Aug - 02:19 Last visit 10 Aug - 07:08 Unique
ACCESS Nursing Programs Session 1 Center Valley Campus Only 8 Weeks Academic Calendar 8 Weeks
Session 1 Academic Calendar August 24, 2015 to October 17, 2015 Tuesday / Thursday, 5:30 pm to 8:30 pm M/W T/TH T/W TH S Saturday lab as scheduled Classes Begin 24-Aug 25-Aug 25-Aug 27-Aug 29-Aug NU205
ACCESS Nursing Programs Session 1 Center Valley Campus Only 8 Weeks Academic Calendar 8 Weeks
Session 1 Academic Calendar August 24, 2015 to October 17, 2015 Tuesday / Thursday, 5:30 pm to 8:30 pm M/W T/TH T/W TH S Saturday lab as scheduled Classes Begin 24-Aug 25-Aug 25-Aug 27-Aug 29-Aug NU205
SYMANTEC INTELLIGENCE REPORT NOVEMBER 2013
SYMANTEC INTELLIGENCE REPORT NOVEMBER 2013 p. 2 CONTENTS CONTENTS 3 Executive Summary 4 BIG NUMBERS 7 TARGETED ATTACKS 8 Targeted Attacks in 2013 8 Targeted Attacks per Day 8 First Attacks Logged by Month
Image Spam: The Email Epidemic of 2006
S e c u r i t y T r e n d s Overview Image Spam: The Email Epidemic of 2006 S E C U R I T Y T R E N D S O v e r v i e w End-users around the world are reporting an increase in spam. Much of this increase
Easter Seals Central Texas Programs Outcome Profiles Monthly and Year to Date FY 2011 85% 87% 80% 80% 84% 84% 83%
I. Outcomes Indicators for individuals receiving services: (Service Delivery Effectiveness) 85% 87% 80% 80% 84% 84% 83% A. Access Sep 10 Oct 10 Nov 10 YTD Dec 10 Jan 11 Feb 11 YTD Mar 11 Apr 11 May 11
Visendo Email Suite a reliable solution for SMBs
Visendo Email Suite a reliable solution for SMBs Visendo offers a range of Email solutions to assist companies in meeting complex e-mail requirements Visendo Security for Email Servers Multi-engine spam
Unified Security Management and Open Threat Exchange
13/09/2014 Unified Security Management and Open Threat Exchange RICHARD KIRK SENIOR VICE PRESIDENT 11 SEPTEMBER 2014 Agenda! A quick intro to AlienVault Unified Security Management (USM)! Overview of the
Symantec's Secret Sauce for Mobile Threat Protection. Jon Dreyfus, Ellen Linardi, Matthew Yeo
Symantec's Secret Sauce for Mobile Threat Protection Jon Dreyfus, Ellen Linardi, Matthew Yeo 1 Agenda 1 2 3 4 Threat landscape and Mobile Insight overview What s unique about Mobile Insight Mobile Insight