What do they do? How do they work? Which one is right for me? By Alan Hearnshaw

Spam is a very real problem that many people have to deal with on a daily basis. For those that have decided to do something about it and start to investigate the options available in spam filtering, this article provides a brief introduction to your options and the types of spam filters available.

Despite the bewildering array of spam filters available today, all claiming to the best one “of its kind” there are really just five filtering methodologies in general use today and all products rely on one, or a combination of these:

Content-Based Filters

“In the beginning, there were content-based filters.”

These filters scan the contents of the and look for tell-tale signs that the message is spam. In the early days of spamming it was quite simple to look out for “Kill Words” such as ”Lose Weight” and mark a message as spam if it was found.

Very soon though, spammers got wise to this and started resorting to all kinds of tricks to get their message past the filters. The days of “obfuscation” had begun. We started getting messages containing the phrase “L0se Welght” (Notice the zero for “o” and “l” for “i”) and even more bizarre – and sometimes quite ingenious – variations.

This rendered basic content-based filters somewhat ineffective, although there are one or two on the market now that are clever enough to “see through” theses attempts and still provide good results.

Bayesian Based Filters

“The Reverend Bayes comes to the rescue”

Born in London 1702, the son of a minister, Thomas Bayes developed a formula which allowed him to determine the probability of an event occurring based on the probabilities of two or more independent evidentiary events.

Bayesian filters “learn” from studying known good and bad messages. Each message is split into single “word bytes”, or tokens and these tokens are placed into a database along with how often they are found in each kind of message.

When a new message arrives to be tested by the filter, the new message is also split into tokens and each token is looked up in the database. Extrapolating results from the database and applying a form of the good reverend’s formula, know as the a “Naive Bayesian” formula, the message is given a “spamicity” rating and can be dealt with accordingly.

Bayesian filters typically are capable of achieving very good accuracy rates (>97% is not uncommon), and require very little on-going maintenance.

Whitelist/Blacklist Filters

“Who goes there, friend or foe?”

This very basic form of filtering is seldom used on its own nowadays, but can be useful as part of a larger filtering strategy.

A “whitelist” is nothing more than a list of e-mail addresses from which you wish to accept communications. A whitelist filter would only accept messages from these people and all others would be rejected

A “blacklist”, conversely, is a list of e-mail addresses - and sometimes IP Addresses (computer identification addresses) - from which communications will not be accepted.

While this may seem like a good idea from the outset, a whitelist methodology is too restrictive for most people and, as virtually all spam e-mails carry a forged “from” address, there is little point in collecting this address to ban it in future as it is very unlikely to be the same next time.

There are bodies on the internet that maintain a list of known “bad” sources of e-mail. Many filters today have the ability to query these servers to see if the message they are looking at comes from a source identified by this Internet-based blacklist, or RBL. While being quite effective, they do tend to suffer from “false positives” where good messages are incorrectly identified as spam. This happens often with newsletters.

Challenge/Response Filters

“Open sesame!”

Challenge/Response filters are characterised by their ability to automatically send a response to a previously unknown sender asking them to take some further action before their message will be delivered. This is often referred to as a "Turing Test" - named after a test devised by British mathematician Alan Turing to determine if machines could “think”.

Recent years have seen the appearance of some internet services which automatically perform this Challenge/Response function for the user and require the sender of an e-mail to visit their web site to facilitate the receipt of their message.

Critics of this system claim it to be too drastic a measure and that it sends a message that "my time is more important than yours" to the people trying to communicate with you.

For some low traffic e-mail users though, this system alone may be a perfectly acceptable method of completely eliminating spam from their inbox - one step above the "Whitelist" system outlined above.

Community Filters

“A united front”

These types of filters work on the principal of "communal knowledge" of spam. When a user receives a spam message, they simply mark it as such in their filter. This information is sent to a central server where a “fingerprint” of the message is stored.

After enough people have “voted” this message to be spam, then it is stopped from reaching all the other people in the community.

This type of filtering can prove to be quite effective, although it stands to reason that it can never be 100% effective as a few people have to receive the spam for it to be “flagged” in the first place. Just like its similar cousin the Internet black list (RBL), this system also can suffer from “false positives”, or messages incorrectly identified as spam.

Hopefully you are now armed with a little more information to be able to make an informed decision on the best spam filter for you.

For further information, consider reading the reviews and articles found at http://www.whichspamfilter.com

Alan Hearnshaw is a computer programmer and the owner of http://www.whichspamfilter.com, a web site which conducts weekly in-depth reviews of current spam filters, provides help and guidance in the fight against spam and provides a useful community forum. alan@whichspamfilter.com

Email is rapidly becoming the standard means of communication among businesses, associates, and even friends. While many people have now been using the internet and email for years, there are thousands of new users on the internet each day. With inexpensive web hosting, free email services, and the blog burst upon us, getting your own slice of the internet pie has never been easier.

Whether you’re a seasoned professional looking for a refresher course, or you’re new to the internet and email and want to start off right, here are some easy steps to follow to reduce the amount of spam you receive.

Don’t choose an obvious email address. Spammers will generate lists of email addresses based on common names. A common list would be something like: nick@yahoo.com, nick1@yahoo.com, nick2@yahoo.com, etc. If you create an email account with less obvious combinations of your name plus some numbers, chances are better that you won’t find your way onto one of these lists.

Treat your personal email address with care. Only give out your personal email address to close friends and family who you trust. Give your direct business email only to clients and other contacts you trust to only use your address for legitimate business purposes.

Use different accounts for different functions. Create different aliases with your business’s domain name or create a few free accounts from free email servers like Hotmail, Yahoo!, Excite, etc. Use one account that you don’t care about for posting to forums or discussion groups. Use another to subscribe to newsletters and newsgroups. When any of these addresses starts to get spammed too heavily, simply delete the account and switch to a different one.

Remove your email address from your website. Between blogs and cheap web space, it seems everyone has their own piece of cyberspace. Before you put a link to your email address on your site, remember that spammers have bots that harvest these addresses. They will even find addresses printed in plain text. Consider using a web-based form for communication from you website, or place your address as a gif or jpeg.

Do NOT open, respond to, or purchase from spam. Interacting with spam in any of these ways indicates to the spammer that not only is your address valid, it’s also active. Do not respond with “unsubscribe” in the subject line, or click on any links to remove your name out of the database, as both of these are common ploys to confirm your email address. Remember, because sending email is so inexpensive, spamming can be profitable even if only a small percentage of people purchase what they’re selling. Don’t support what you’re trying to stop.

Finally, Filter your incoming email using filtering software. Even if you guard your email address religiously, you’ll likely still receive spam. Filtering software is usually inexpensive and effective, but there are some important features to consider with any filtering package:

• Make sure you can control what comes to your inbox and what gets deleted. The best programs create a spam folder for you to review before permanently deleting emails.

• The software should block images from incoming emails. Many jpegs in spam actually hide code that notifies the spammer when the email is viewed. Blocking images will not only keep offensive content off your screen but will also help prevent more spam in the future.

• Choose software that provides you with updates - as new spamming techniques are created and proliferated, filtering software should keep up.

While eliminating spam from coming to your email address is nigh unto impossible, following these simple steps will mean you’ll have to spend less time deleting spam from your inbox, giving you more time for the important things of life –- like reading this article.

Nick Smith is a client account specialist with 10x Marketing - More Visitors. More Buyers. More Revenue. Find more information about how to filter spam at ContentWatch, Inc.

The harmful affects of pornography use and addiction are well documented by science. As with most things in life, prevention is the most effective way to avoid ever having a problem with pornography.

The internet is a wonderful place to access information, read updated news, and connect with people from all over the globe. Unfortunately, pornography on the internet is everywhere, and it isn’t always easy to avoid. Even people taking responsible measures to keep porn off of their computer screens can stumble across it sometimes. The tips found in this article will help you protect yourself and your family online from inappropriate pictures and text.

Take measures to filter spam. Spammers can make money if only one person of the thousands of people they send sexually explicit emails to clicks on their ad and pays for their service. Do everything you can to keep those emails from ever reaching your inbox. If you have allowed your children to have their own email accounts, filtering spam is the best way to ensure inappropriate images never become accessible to them through email. A quick list of things you can do to eliminate spam includes:

• Only give your email address out to people you know and trust. Do not put your personal email address down for every mailing list or website that asks for it. Many free email services exist now - set up a free account with one of them and use that to sign up for mailing lists.
• Never click on any links in spam and if at all possible, avoid ever opening the email. Both of these actions confirms to spammers that you actively use your email account and you will likely start to receive more spam.
• Purchase and use a spam filter. Many come packaged with a porn filter as well as other features that will help keep inappropriate content off of your computer screen.

Be careful what you download. This should be a universal precaution you take by now each and every time you download something off the internet. Viruses, spyware, and pornography can very easily be hidden in the files that you download - prevention in this case is much easier than fixing the problem after the files have already made their way onto your hard drive. Only download files from sources that you trust, and if you ever have a question as to whether something contains a virus or pornography, do NOT download it.

Use a search engine to find websites. Pornographers use domain names that are similar to popular websites or brands in hopes that people will type in the address incorrectly and end up at their pornography site. I knew a child that wanted to look up codes for his favorite video game, so he typed in the name of the game and ".com." He had the presence of mind to close the browser and tell his parents, but was still exposed to the material.

One of the best ways to avoid this is searching for the address in Google. Then you can preview the results in a text-only format before clicking on the link to go to the page. Many of the popular search engines have a built-in porn filter that you can adjust to control the type of content you don’t want to appear in the search results. Others even offer "for kids" versions of their search engines that only return pages deemed appropriate for children.

Use filtering software that includes a porn filter. No matter how careful you are about the sites you visit, chances are good that someday you will accidentally come across a porn site. A porn filter will help ensure that inappropriate material is blocked when you or someone in your family stumbles across a pornographic website. The parents of the boy who stumbled across pornography while looking for his favorite Nintendo game quickly installed a porn filter to make sure their son was protected in the future.

Avoid pornography offline. Porn was around long before the internet. Carry around your own internal porn filter and avoid places that you know will have inappropriate images, movies, or books displayed. If your children are with you, be extra cautious of where they are in the store. If you think there is a chance that they may be able to access inappropriate material while you are shopping, let the store manager know of your concerns. Likely, you are not the only one who is worried about the issue, and real changes can come about from one person simply speaking up.

Take the appropriate precautions now to avoid pornography. If you or someone you know has a problem with pornography use or addiction, seek professional help. Pornography problems not only affect the individual viewing the picture but everyone who interacts with that person.

Nick Smith is a client account specialist with 10x Marketing - More Visitors. More Buyers. More Revenue. For a porn filter and more information about protecting your family online, visit ContentWatch, Inc.

With the number of spam filtering solutions increasing each week it’s getting tougher for consumers to make informed choices in their purchases.

There are 3 basic types of spam filters:

1. Integrated
2. Standalone
3. Online

We’ll look at each type of spam filter and at the end you should be able to decide what spam filter is right for you.

Integrated spam filters

This type of spam filtering software is the most common. Once installed it sits "on top" of your existing email software and installs a new set of buttons into your email software. In future when you collect email you’ll see options for marking email as Spam, marking the email as Not Spam, Bounce the email back to sender, etc. The description and position of these buttons varies from one product to the next but their purpose remains the same.

Most integrated spam filters automatically place suspected junk email into a separate folder on your PC for you to review or delete later on.

The newer integrated spam filters are also "intelligent". They can basically learn the difference between what is spam and what is not and delete the junk email you don’t want.

The most popular integrated spam filters are:

Integrated spam filters are most popular amongst people who want a one click solution to collecting their personal email and filtering junk email at the same time.

Advantages:

One click solution.

Disadvantages:

Software specific. Some work with Outlook and Outlook Express only.

Standalone spam filters

These are less common than their integarted counterparts but that doesn’t make them any less useful. A standalone spam filter is basically a separate piece of software installed on your PC that you use to check your email for spam.

Standalone filters have the big advantage of being able to preview your email on the mail server before it’s downloaded to your PC. This one single feature has the huge benefit of allowing you to just download the email that you want as opposed to downloading all of your email, including the spam, and then sorting through it.

Using a standalone spam filter is a little more work simply because it’s a separate piece of software that you have to run before you open up your email software. Most standalone filters do allow you to configure them so that your standard email application is opened once you’ve chosen what spam to filter. This suits some people and not others.

The most popular standalone spam filter is:

Mailwasher Pro

Advantages:

Doesn’t rely on specific email applications to work properly.

Disadvantages:

Two step process. Load standalone filter and then your email application.

Online spam filters

There are really two types of online spam filters. One is for business use and one is for home use. A typical example of a business type product is iHate Spam server edition where the software deletes junk email directly from the mail server before the end user even sees it. Large companies employ this type of technology.

Home users will be using Spam Arrest or similar. Spam Arrest offers an inventive solution to spam whereby any email sent to the users account has a challenge request sent back to it which the sender must authenticate. The automatic junk email software used by spammers can’t currently deal with this type of response. Any failure to authenticate the challenge email results in the junk email being left to die in cyberspace. A user is authenticated with Spam Arrest only once for security just to make sure the software doesn’t become a nuisance.

The most popular online spam filter is:

Spam Arrest

Advantages:

Users are guaranteed to only receive the email that they want or requested.

Disadvantages:

Any techncial problems with the Spam Arrest server and you have no defense against spam.

This article was provided courtesy of Spam-site.com which reviews and tests spam filters.

In today’s spam-filled email world, it’s sometimes VERY difficult to get your news releases and PR pitches to the media person you are trying to reach. These tips hold true for personal emails, too, so even if you don’t do P.R., this article offers some important email tips.

Here are a few ideas to help you be more successful in reaching your target.

1. Write the release with spam filters in mind.

There are many words that trigger spam filters these days. Learn to write alternative words, substitute zeros for Os or add * in the word to avoid the spam trap. You can find out which words are likely to be a problem in this excellent list provided by Dr. Wilson: http://www.wilsonweb.com/wmt8/spamfilter_phrases.htm

2. Check your content to see what your spam filter rating is.

There are free sources to check your email. One of them is Lyris Content Checker ( http://www.lyris.com/contentchecker/), which checks it against the SpamAssassin database.

3. Send each email individually, not as a CC or BCC.

The CC function allows everyone to see who you sent your email to so you definitely don’t want to do that. The reporters will get irritated when they see you have sent it to all of their competitors. As my grandmother used to say,"It’s better to keep some things to yourself."

The BCC function allows you to hide the list of recipients from everyone who receives the email, but it doesn’t hide it from the email programs and filters. These programs know that you are sending a BCC message to a list, and if you send it to 10 or more, it will automatically trigger the spam filter.

You can send your emails efficiently from many database programs. I use ACT! and it allows me to not only send to a group, with each email going individually, but it also keeps track of what I sent to whom.

There are also systems available, like the one I use to deliver my ezines (which comes with my 1ShoppingCart.com service), designed to send hundreds and thousands of emails all at the same time. And the best thing is, you can tailor your release to add personal details about each recipient, such as their name and the industry they cover. I use my shopping cart to deliver my newsletters, but you can also use a service like ConstantContact for this.

4. Include the recipient’s name in the subject line.

When someone sends me an email that begins, "Lois,…", I pay attention. I know that this person either knows me or I have subscribed to their ezine or asked to have them communicate with me for some reason. And I NEVER report these people as spammers. If I don’t want to continue receiving information from them, I politely unsubscribe or email them to take me off their list. Think about it. You respond better when someone uses your name, don’t you? It’s a terrific way to get someone’s attention.

5. Include [News] or [Pitch] in brackets at the beginning of the subject line.

Again, you need to give the reporter an easy way to spot your news as legitimate. So tell them up front you are sending them news or a pitch and watch your email delivery rate soar.

6. Include the reporter’s column or beat in the first paragraph.

A reporter is always going to pay more attention to your pitch if you are one of their faithful readers. If you start out your email with something like, "Jane, in last week’s Cooking for One column, you said…", you will surely get the reporter’s attention.

7. Include all your contact information

Nothing’s worse than getting an email that you want to respond to immediately and having no way to contact the person except by email. Give the reporter all your phone numbers. And don’t forget your physical address and website domain. Make it easy for them to contact you.

8. Never include any attachments.

Unless you’ve been living in a cave without Internet access, you know that attachments are the way that most worms and viruses are spread on the Net. Windows XP strips off most attachments, and most corporate entities don’t allow attachments to come through their systems. They can even get you blacklisted so your emails cannot get through. So don’t be stupid. Don’t send attachments unless someone asks for them.

9. Provide a link to your website to download photos, graphics, graphs, bios and other background information.

Just about anything that you need to deliver to a reporter can be uploaded to your website. You can include product photos, people photos (remember to make them 300 dpi for print/ 72 dpi for online and in various sizes, so that the media can choose which size they want to use), bios, background information, sample chapters, and even an entire digital book. If the reporter wants you to send the product or a physical book, then you’ll have to mail that, of course.

10. Always include a subject line, but never put "Hi" or"Hello" in the subject line, especially alone.

Emails without subject lines are usually spam, and those that say hi or hello are usually viruses, so no one is going to open them. Be thorough. Include a subject line.

11. Follow CAN-SPAM rules and allow an easy unsubscribe method to your email list.

Even if you don’t include a one-click unsubscribe, you should at least include a statement that tells the reporter how they can get off the list or let you know that their beat has changed. A simple statement that says, "To get off this subscriber list, simply hit ‘reply’ and put ‘remove’ in the subject line" will suffice. And don’t forget to include your name and address.

Lois Carter Fay, APR, is a 30-year veteran in the P.R. and marketing field. She now produces three marketing ezines, Brainy Tidbits, Brainy Flash, and Success Secrets of Women Entrepreneurs. All are free.

Visit http://www.MarketingIdeaShop.com or http://www.WomenMarketing.com to subscribe and claim your free special report.

There are hundreds of thousands of people who are trying to make an honest living on the Internet these days. The Internet is a great opportunity for starting your own business. There is not a lot of start-up cost, you can reach the whole world from a small corner of your own house, and the income can be exceptional.

However, a lot of us publishers and Internet marketers are running into a serious problem.

Before I start talking about it, I want to ask you all a question - How many of you get junk snail mail? Everyone, right? Now, how many of you call the cops when you get it? None, right? Of course not because that would be ridiculous!

We simply throw it in the trash and forget about it. Very easy, right?

What I don’t understand is why it is not as simple as that with your email. We have all received junk email, also known as sp~m. Just junk mail of the Internet, right? So why do so many people make such a big deal about it??? I know that reputable publishers and marketers have been reported to "sp~m cops" and were caused serious problems because of it. And why? Not because they have done anything wrong, but because a subscriber forgot they subscribed to the ezine or they forgot they requested information or some other foolish reason.

Now we have to deal with a thing called "sp~m filters"! Not only do these "filters" keep legitimate ezines, emails, reports, etc. from going through, but the amount of sp~m has only increased! These "filters" are also causing many problems for publishers and subscribers alike!

I have also had an experience of being reported for sp~m. Someone requested one of my articles by autoresponder. Well, they received the article and then a couple of days later a follow-up thank you note. Apparently this thank you note pi**ed them off because they reported me to my ISP. I then received a phone call from my ISP telling me my email account was going to be cancelled immediately! Well, it took me awhile, but I finally was able to explain that the person who received that email had to have requested my article by autoresponder. There was no other way he could have gotten that message.

So, I was able to save my account, but I know of several people who didn’t get off so easy.

I rarely gripe about anything like this because I know a lot of computer problems are out of our control, but this is a problem caused by people, not machines!

This is really getting out of hand…..so I have come up with a very simple yet effective idea for getting rid of sp~m! Are you ready for this???

Ok, first you click on the sp~m message in your inbox. Make the determination ( be sure now) that it is, indeed, sp~m. Then you stick up your index or other finger if you prefer ( be nice now) and push the magic button marked D-E-L-E-T-E. This will make the sp~m magically disappear!

I have used this method of sp~m destruction since starting on the Internet and have found it to be most effective. I receive hundreds of sp~m messages a day, but always manage to make each and every one disappear forever!

I also have some tips for people who do not want to receive any so-called sp~m:

1. Do Not subscribe to any newsletters!
2. Do Not sign-up for special offers!
3. Do Not request any information via autoresponder!
4. Do Not send any email to anyone at anytime!
5. Do Not use your email for any reason whatsoever!

I assure you if you follow all these tips you will never receive any sp~m!

I know I have been a little ridiculous in making my point, but that just is my point. All this hullabaloo about sp~m is ridiculous. It is simply junk mail and can be deleted without any trouble, hassle or problems!

Try it a few times and you will soon be like me - I have the fastest delete finger in the Midwest!! Anyone care to challenge me??

Wishing you a wonderfully warm and joyous Christmas!

About The Author

Terri Seymour owns and operates MyOwnEzine.com.

Learn to publish and promote your own ezine. mailto:subscribe@myownezine.com.

For a complete list of her articles available for reprint please email: mailto:myownezine-index@getresponse.com

You can contact her at mailto:ter02@newnorth.net

Microsoft scores one for the good guys

Scott Richter, the self-proclaimed “Spam King,” just can’t seem to get enough attention. Admittedly responsible for sending literally billions of Unsolicited Commercial Email messages (UCE), Richter made headlines again recently when his spam-fed cash cow, OptInRealBig.com, filed for bankruptcy protection in U.S. federal court in his home state of Colorado. According to Richter’s father (who is also his attorney), “It’s the legal fees that are battering the company. OptIn is profitable but for these lawsuits.”

At the time of its bankruptcy filing, OptInRealBig.com claimed assets of less than $10 million and liabilities of over $50 million. Richter claimed his company made $15 million a year sending more than 15 million email messages per day. However, in 2003, OptInRealBig was dealt a powerful 1-2 punch from Microsoft and Eliot Spitzer, the Attorney General of New York; both sued Richter under local state anti spam laws. Although the New York case was settled out of court last year, Richter has had no such luck dealing with Microsoft, whose claims top $19 million.

A Case of Global Amnesia?

Richter’s company and others like it market products ranging from diet pills to pornography. He’s also been accused of using spam to extract personal information from unsuspecting recipients. For instance, one alleged scheme hatched by Richter and his associates promised recipients a copy of a "Girls Gone Wild" DVD if the recipient registered on a website. The registration information was then used to bombard the recipient with more and more spam.

Richter contends that his methods are all legal, and that he’s just a regular guy trying to do right by the world; he’s even gone so far as to claim that he’s a “victim” of overzealous anti spam companies and prosecutors. “We don’t spam,” explained Richter in an August 2004 PC World interview. “The biggest problem is when people get an email that they think they didn’t sign up for or don’t remember signing up for, and they call it spam.”

To hear Richter tell it, tens of millions of people simply forgot that they had previously asked to receive his messages. According to the state of New York, however, he falsified header information and used deceptive routing and domain purchase practices in order to get his messages through. The lawsuit also accused Richter of using a network of approximately 500 “zombie” computers to send his messages. When asked how so many users could have subscribed and not remember doing so, Richter claimed the signups must have been via anonymous "partners of our partners" web sites, the names of which slipped his mind.

Not Just an Online Threat

Evidently not satisfied with stealing bandwidth, Richter also shows a penchant for heavy equipment. In an unrelated 2003 case, he was put on probation after pleading guilty to a felony charge of receiving stolen items worth more than $10,000. According to court records, an informant’s tip regarding a stolen Bobcat loader led undercover officers to Richter. Over the course of 13 months, the officers proceeded to strike deals with him for a Honda generator, hundreds of cases of cigarettes, three laptop computers and other items, all offered at suspiciously low prices and purchased in some of Denver’s seediest neighborhoods. In addition to probation, Richter was also ordered to pay $38,000 in restitution for the stolen goods.

Despite his guilty plea, Richter maintains his innocence, saying he pleaded guilty to the felony charges because it was "easier to be done with it," and he had "too much stuff going on in my life."

What’s Next for Scott Richter?

The 5-year-old OptInRealBig.com, which employed 25 people last year and had 350 clients, will continue to operate under Chapter 11 bankruptcy protection. While the bankruptcy filing shows the power of legislation and legal action from parties with a vested interest in stopping spam, Richter is not likely to fade quietly into the sunset. Under Chapter 11 bankruptcy laws, the company must follow a court-supervised “debt rehabilitation” plan to pay off creditors, but is not required to modify its business practices. None of OptInRealBig’s assets will be liquidated, meaning the company’s stable of spam cannons will remain active. The bottom line: Scott Richter will not be required to stop sending UCE in the immediate future, pending ongoing litigation intended to determine exactly what spam is in legal terms. In the meantime, the best defense against spam is a comprehensive gateway solution that will guard against all manner of email threats, especially spammers like Scott Richter.

Dr. Paul Judge is a noted scholar and entrepreneur. He is Chief Technology Officer at CipherTrust, the industry’s largest provider of enterprise email security. The company’s flagship product, IronMail provides a best of breed enterprise anti spam solution designed to stop spam, phishing attacks and other email-based threats. Learn more by visiting http://www.ciphertrust.com/products/spam_and_fraud_protection/ today.

Block Spam and Other Email Threats From Entering Your Gateway Spam, commonly defined as unsolicited commercial email, is a powerful advertising channel for many products and services. As a result, spamming has become a profitable business, driven by the low cost of sending email compared to other direct marketing techniques. The high return on investment for spammers has resulted in an overwhelming volume of unwanted messages in personal and business email boxes. Consider this: Conducting a direct mail campaign costs an average of $1.39 per person, meaning that a response rate of 1 in 14 is necessary just to break even on a product with a $20 gross profit. Selling the same item via unsolicited spam email costs only $0.0004 per person, meaning that a response rate of 1 in 50,000 gets the seller back to break-even; anything above that is gravy. With profit margins like these, it’s easy to see why spammers will try anything to get past anti spam technology to deliver their messages to your inbox.

Types of Spam Threats
The recent onset of fraudulent spam variants such as phishing and spoofing pose an even greater risk than the spam volume clogging email servers. Spammers use techniques such as phishing and spoofing to fool users into opening messages that, at first glance, appear innocuous.

Phishing
Phishing is a specific type of spam message that solicits personal information from the recipient. Phishers use social engineering techniques to fool end users into believing that the message originated from a trusted sender, making these attacks especially dangerous because they often con victims into divulging social security numbers, bank account information or credit card numbers. In one six-month period from November 2003 to May 2004, phishing attacks increased in frequency by 4000%, and the trend continues upward.

An example of phishing is an email that appears to come from a bank requesting that users log into their account to update or correct personal information. When the users follow a link embedded in the email, they are redirected to a site that looks and behaves like the expected bank website. However, unbeknownst to the soon-to-be identity theft victims, the site is actually controlled by the scam artists who sent the email; any and all information entered by the victim can now be used in a variety of ways, none of them good.

Spoofing
Spoofing is a deceptive form of spam that hides the domain of the spammer or the spam’s origination point. Spammers often hijack the domains of well-known businesses or government entities to make spam filters think the communication is coming from a legitimate source.

Today’s spammers are more crafty than ever before and have begun blending elements of both phishing and spoofing into their messages, further spinning their web of deception. The toxic combination of spoofing and phishing presents a major threat that can trick most anyone into providing personal information to a stranger.

Toothless Legislation
On January 1, 2004, President Bush signed into law the “Controlling the Assault of Non-Solicited Pornography and Marketing Act of 2003,” or “CAN-SPAM” Act. While well intentioned, CAN-SPAM has done little or nothing to curb the flow of unwanted email. In fact, an estimated 97% of all spam email sent in 2004 violated the Act, and the United States still dwarfs other nations in terms of the origin of spam, with CipherTrust research revealing that an astonishing 56.77% of all spam comes from U.S.-based IP addresses. While CAN-SPAM was designed to decrease the overall volume of spam, the exact opposite has happened: in 2004, spam accounted for approximately 77% of all email traffic, and phishing attacks continue to increase exponentially, with studies showing an increase of 4000% from November 2003 to May 2004.

Anti Spam Software for the Desktop
The dramatic increase in spam volume has prompted a corresponding surge in stand-alone anti spam software solutions for the desktop, all with varying levels of effectiveness. Some anti spam software uses text filtering to screen incoming messages for known characteristics of spam, while other solutions rely solely on reputation systems that monitor and categorize email senders by IP address according to their sending behavior. Still other anti spam software uses “challenge/response filters” to block unapproved mail until the sender responds (manually) to a challenge email sent to their email account to verify his or her identity.

With so many different methods of filtering spam, no single software-based desktop anti spam solution is capable of effectively stopping spam before it reaches the inbox. The only way to successfully fight spam is to create an anti spam “cocktail” including reputation services, text filters, constant updates and a host of other best-of-breed spam blocking methods. Just as importantly, an effective anti spam solution should reside at the email gateway, not at the desktop. Without protection at the gateway, mail servers waste massive amounts of bandwidth and storage space processing every message, wanted or not, and end users face the unenviable task of deciding what to do with the countless spam messages that successfully reach them.

Take a Consolidated Approach to Anti Spam
Although it takes a person only a moment to process a message and identify it as spam, it is difficult to automate that human process because no single message characteristic consistently identifies spam. In fact, there are hundreds of different message characteristics that may indicate an email is spam, and an effective anti spam solution must be capable of employing multiple spam detection techniques.

In addition to effectively identifying spam, businesses must be assured that legitimate mail is not blocked in error. Even one false positive, or incorrectly blocked email, can have a significant impact on businesses today. Accurate spam blocking requires a combination of tools to examine various message criteria combined with real-time research and intelligence data.

By aggregating multiple spam detection technologies like text filtering, reputation services, traffic analysis and other best-of-breed techniques, and placing the solution at the email gateway in a hardened appliance, enterprises can retake control of the inbox.

Dr. Paul Judge is a noted scholar and entrepreneur. He is Chief Technology Officer at CipherTrust, the industry’s largest provider of enterprise email security. The company’s flagship product, IronMail provides a best of breed enterprise anti spam solution designed to stop spam, phishing attacks and other email-based threats. Learn more by visiting http://www.ciphertrust.com/products/spam_and_fraud_protection/ today.

Effectively stopping spam over the long-term requires much more than blocking individual IP addresses and creating rules based on keywords that spammers typically use. The increasing sophistication of spam tools coupled with the increasing number of spammers in the wild has created a hyper-evolution in the variety and volume of spam. The old ways of blocking the bad guys just don’t work anymore.

Examining spam and spam-blocking technology can illuminate how this evolution is taking place and what can be done to combat spam and reclaim e-mail as the efficient, effective communication tool it was intended to be.

One method used to combat spam is Bayesian Filtering. Named after Thomas Bayes, an English mathematician, Bayesian Logic is used in decision making and inferential statistics. Bayesian Filers maintain a database of known spam and ham, or legitimate email. Once the database is large enough, the system ranks the words according to the probability they will appear in a spam message.

Words more likely to appear in spam are given a high score (between 51 and 100), and words likely to appear in legitimate email are given a low score (between 1 and 50). For example, the words “free” and “sex” generally have values between 95 and 98, whereas the words “emphasis” or “disadvantage” may have a score between 1 and 4. Commonly used words such as “the” and “that”, and words new to the Bayesian filters are given a neutral score between 40 and 50 and would not be used in the system’s algorithm.

When the system receives an email, it breaks the message down into tokens, or words with values assigned to them. The system utilizes the tokens with scores on the high and low end of the range and develops a score for the email as a whole. If the email has more spam tokens than ham tokens, the email will have a high spam score. The email administrator determines a threshold score the system uses to allow email to pass through to users.

Bayesian filters are effective at filtering spam and minimizing false positives. Because they adapt and learn based on user feedback, Bayesian Filers produce better results as they are used within an organization over time. They are not, however, foolproof. Spammers have learned which words Bayesian Filters consider spammy and have developed ways to insert non-spammy words into emails to lower the message’s overall spam score. By adding in paragraphs of text from novels or news stories, spammers can dilute the effects of high-ranking words. Text insertion has also caused normally legitimate words that are found in novels or news stories to have an inflated spam score. This may potentially render Bayesian filters less effective over time.

Another approach spammers use to fool Bayesian filters is to create less spammy emails. For example, a spammer may send an email containing only the phrase, “Here’s the link…”. This approach can neutralize the spam score and entice users to click on a link to a Web site containing the spammer’s message. To block this type of spam, the filter would have to be designed to follow the link and scan the content of the Web site users are asked to visit. This type of filtering is not currently employed by Bayesian filters because it would be prohibitively expensive in terms of server resources and could potentially be used as a method of launching denial of service attacks against commercial servers.

As with all single-method spam filtering methodologies, Bayesian filters are effective against certain techniques spammers use to fool spam filters, but are not a magic bullet to solving the spam problem. Bayesian filters are most effective when combined with other methods of spam detection.

The Solution

When used individually, each anti-spam technique has been systematically overcome by spammers. Grandiose plans to rid the world of spam, such as charging a penny for each e-mail received or forcing servers to solve mathematical problems before delivering e-mail, have been proposed with few results. These schemes are not realistic and would require a large percentage of the population to adopt the same anti-spam method in order to be effective. You can learn more about the fight against spam by visiting our website at www.ciphertrust.com and downloading our whitepapers.

Dr. Paul Judge is a noted scholar and entrepreneur. He is Chief Technology Officer at CipherTrust, the industry’s largest provider of enterprise email security. The company’s flagship product, IronMail provides a best of breed enterprise anti spam solution designed to stop spam, phishing attacks and other email-based threats. Learn more by visiting http://www.ciphertrust.com/products/spam_and_fraud_protection today.

As the flood of spam increases end users are looking for new and more efficient solutions to block spam. In turn software developers are knocking themselves out trying to come up with the killer app that will stop spam forever.

For several years now companies have been focusing on faster and smarter software to be installed on your PC or on your servers that will detect spam through increasingly more complex algorithms. The ingenuity behind these products can’t be argued with. The problem was that as the spam filters became better so did the quality of the bulk email software used by the spammers. The battle to fight spam was spiralling out of control.

There’s an old scientific principle called Occams Razor. It simply means that all things being equal the most simple solution is often the best one.

Somebody somewhere realized that there was a simple solution to the vast majority of spam. Spammers email millions of people each day. This is an automated process that they can’t possibly monitor manually. Enter challenge response spam email filtering.

When using a challenge response system each email address must be authorized to deliver email to you. You can either authorize these email addresses manually by adding them to your challenge response whitelist or the challenge response email server can take care of that for you.

The process is simple but incredibly efficient.

Spammer sends email

Challenge response email server doesn’t recognize address so issues a challenge email that must be phyiscally answered by a real human.

Challenge answer = yes = sender is authorized to send you email

Challenge answer = no = senders email address is added to blacklist and all future email from them is automatically blocked.

Challenge repsonse spam filters demand that a real person reply to the challenge email. Spammers who generate millions of emails a day simply don’t have the time to do this and are therefore blocked from sending you any future junk email.

Using a challenge response system initially can be extra work but after 30 days you’ll see a dramatic reduction in the amount of email you receive from spammers. Our challenge response system is currently showing 11,000 blocked pieces of spam in the last *5 months*. Those are hard figures to argue with.

Challenge response spam filtering programs are one of the single most effective ways to eliminate any spam problems you might have.