@inproceedings{0a87bd697e874078b4a03876abbb25c0,
title = "Early detection of outgoing spammers in large-scale service provider networks",
abstract = "We present ErDOS, an Early Detection scheme for Outgoing Spam. The detection approach implemented by ErDOS combines content-based detection and features based on inter-account communication patterns. We define new account features, based on the ratio between the numbers of sent and received emails and on the distribution of emails received from different accounts. Our empirical evaluation of ErDOS is based on a real-life data-set collected by an email service provider, much larger than data-sets previously used for outgoing-spam detection research. It establishes that ErDOS is able to provide early detection for a significant fraction of the spammers population, that is, it identifies these accounts as spammers before they are detected as such by a content-based detector. Moreover, ErDOS only requires a single day of training data for providing a high-quality list of suspect accounts.",
keywords = "classification, early detection, email service provider (ESP), spam",
author = "Yehonatan Cohen and Daniel Gordon and Danny Hendler",
year = "2013",
month = aug,
day = "12",
doi = "10.1007/978-3-642-39235-1_5",
language = "American English",
isbn = "9783642392344",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
pages = "83--101",
booktitle = "Detection of Intrusions and Malware, and Vulnerability Assessment - 10th International Conference, DIMVA 2013, Proceedings",
note = "10th Conference on Detection of Intrusions and Malware and Vulnerability Assessment, DIMVA 2013 ; Conference date: 18-07-2013 Through 19-07-2013",
}