Measurement and evaluation of a real world deployment of a challenge-response spam filter

Jelena Isacenkova (1) , Davide Balzarotti (1)

1 Eurecom [Sophia Antipolis]

Despite the number of existing solutions, spam still accounts for a large percentage of the email traffic on the Internet. Both the effectiveness and the impact of many common anti-spam techniques have already been largely studied and evaluated against multiple datasets. However, some of the less known solutions still lack a proper experimental validation. For example, Challenge-Response (CR) systems have been largely discussed, and often criticized, because they shift the effort to protect the user's mailbox from the recipient to the sender of the messages. In addition, these systems are believed to produce a lot of backscattered emails that further deteriorate the global Internet situation. In this paper we present the first comprehensive measurement study of a real anti-spam system based on a challenge-response technique. In our work we analyze a large amount of data, collected for a period of six months from over forty companies protected by a commercial challenge-response product. We designed our experiments from three different point of views: the end user, the system administrator, and the entire Internet community. Our results cover many different aspects such as the amount of challenges sent, the delay on the message delivery, and the likelihood of getting the challenge server blacklisted. Our aim is neither to attack nor to defend CR-based solutions. Instead, we hope that our findings will shed some light on some of the myths about these kind of systems, and will help both users and companies to take an informed decision on the topic.

Mots clés: blacklisting; challenge-response; spam; whitelist

Domaines: Informatique

Jelena Isacenkova, Davide Balzarotti. Measurement and evaluation of a real world deployment of a challenge-response spam filter. ACM SIGCOMM, Nov 2011, Berlin, Germany. pp.413--426, ⟨10.1145/2068816.2068855⟩. ⟨hal-00736001⟩