Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« How Will Economic Downturn Affect Security? | Main | Sharing Accounts a Common Practice »

Spam Is Down But Will Be Back

Spam has dropped 66%-75% with the shutdown by some ISPs of a Web hosting company with spam spewing clients. Not only will this not last but spammers will be back and with a more resilient strategy.

The story starts with a couple of articles in the Washington Post (here and here)

Spammers have moved to botnets to generate huge volumes of spam but they still depend on Internet infrastructure. In this case, security experts where able to find a single point of failure in the spam system,

a major U.S. hosting service for international firms and syndicates that are involved in everything from the remote management of millions of compromised computers to the sale of counterfeit pharmaceuticals and designer goods, fake security products and child pornography

Take out the choke point in a system and you shut down the system. Resilient system design avoids single points of failure like this. Spammers, bot herders and malware developers have proven to be quite able to adapt to emerging threats and opportunities in their domain. Simple strategies like redundancy can go a long way to improve resiliency; more complex models like peer-to-peer computing, like that already used in botnets, may be extended to reduce single points of failure.

We can have some relief from spam for now it will be back and when it comes back it won't be so dependent on a single provider. Whatever the new infrastructure is, it will be more difficult to take down.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/953

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net