Home > Ask the Security Experts > Expert Archive: Information Security Threats Questions & Answers > Can simple antispam filters solve the image spam problem?
Ask The Security Expert: Questions & Answers
EMAIL THIS

Can simple antispam filters solve the image spam problem?

Ed Skoudis, past SearchSecurity.com expert EXPERT RESPONSE FROM: Ed Skoudis, past SearchSecurity.com expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 01 October 2006
With the hype lately about image spam, I find myself wondering why companies don't just filter it out. How often does a legitimate message contain only an image? In business mail, I'd venture to say it should never happen. Even in personal mail, it's rare; people almost always include comments with the pictures they send around. Therefore, a simple rule filtering out messages lacking body text ought to take care of the problem, right?

>
Your suggestion is reasonable, but not a panacea. I receive a lot of spam that contains only image attachments. In fact, when searching through my antispam filter (a very un-scientific method of analysis), I estimate that about 5% of the spam I receive contains nothing more than an image. So, why not filter all images?

First, it's a distinct minority of all spam, and filtering puts a frustratingly small dent in the problem. Second, the bad guys can easily adapt and are already doing so. A few months ago, a lot of the pump-and-dump stock spam messages were purely images, but now spammers often append a bunch of gibberish words or random sentences to the email by placing them underneath the image. Third, traditional antispam solutions can detect image-based spam reasonably well, responding to hashes of the images themselves and the fact that they are spewed out in bulk. Rather than blocking image spam wholesale, we can catch it using traditional antispam filters. So, your idea of filtering them is a good one, but nothing that will put a major dent in the glut of spam.

More information:

  • Learn how IT pros are battling image spam.
  • Find out how well whitelists and blacklists can stop spam?

  • BROWSE BY TAG
    Emerging Information Security Threats,   Expert Archive: Information Security Threats,   Application and Platform Security,   Email Protection,   Email and Messaging Threats (spam, phishing, instant messaging),   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED CONTENT
    Emerging Information Security Threats
    RSA security conference 2010: news, interviews and updates
    Hackers to sharpen malware, malicious software in 2010
    Modern malware, stealthy botnets, adapt quickly, expert says
    New ransomware Trojan pushes victims to buy software
    Bruce Schneier on outsourcing, awareness training
    US-CERT warns of BlackBerry snooping software
    Marcus Ranum on cyberwarfare, infosec careers
    Researchers find thousands of flawed embedded devices
    Enterprise botnets contain thousands of malware variants
    Nuke and pave to eradicate botnets

    Expert Archive: Information Security Threats
    The telltale signs of a network attack
    Will Google Chrome enhance overall browser security?
    Are there antivirus suites that pick up more than just run-of-the-mill viruses?
    What tools can a hacker use to crack a laptop password?
    Are social networking sites an easy target for malicious hackers?
    What are the dangers of cross-site request forgery attacks (CSRF)?
    Should social engineering tests be included in penetration testing?
    What kind of data is compromised during a Google hack?
    Best practices for using restriction policy whitelists
    Defining mobile device security concerns

    Email and Messaging Threats (spam, phishing, instant messaging)
    Messaging security risks have upper hand on solutions
    Web-based attacks skyrocket, pirating sites surge, security firms say
    Pushdo botnet uses Facebook to spread malicious email attachment
    Scareware report highlights successful business model
    How to prevent phishing attacks with social engineering tests
    Phishing protection begins with training, antiphishing evangelist
    Phishing attacks to remain a major problem, say security experts
    Barracuda acquires Purewire expanding Web security reach
    FBI raids phishing crime ring, nearly 100 arrested
    Massive phishing scheme affects Microsoft Hotmail accounts
    Email and Messaging Threats (spam, phishing, instant messaging) Research

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    DNS rebinding attack  (SearchSecurity.com)
    drive-by pharming  (SearchSecurity.com)
    JavaScript hijacking  (SearchSecurity.com)
    man in the browser  (SearchSecurity.com)
    phlashing  (SearchSecurity.com)
    polymorphic malware  (SearchSecurity.com)
    pulsing zombie  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts