{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,3]],"date-time":"2026-06-03T07:33:30Z","timestamp":1780472010505,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":42,"publisher":"ACM","license":[{"start":{"date-parts":[[2007,10,28]],"date-time":"2007-10-28T00:00:00Z","timestamp":1193529600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2007,10,28]]},"DOI":"10.1145\/1315245.1315288","type":"proceedings-article","created":{"date-parts":[[2007,11,15]],"date-time":"2007-11-15T14:30:20Z","timestamp":1195137020000},"page":"342-351","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":114,"title":["Filtering spam with behavioral blacklisting"],"prefix":"10.1145","author":[{"given":"Anirudh","family":"Ramachandran","sequence":"first","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nick","family":"Feamster","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Santosh","family":"Vempala","sequence":"additional","affiliation":[{"name":"Georgia Institute of Technology, Atlanta, GA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2007,10,28]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Spamhaus delisting policy 2007. http:\/\/www.spamhaus.org\/sbl\/policy.html.  Spamhaus delisting policy 2007. http:\/\/www.spamhaus.org\/sbl\/policy.html."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-40965-6_6"},{"key":"e_1_3_2_1_3_1","volume-title":"May","author":"Allman E.","year":"2007","unstructured":"E. Allman , J. Callas , M. Delany , M. Libbey , J. Fenton , and M. Thomas . DomainKeys Identified Mail (DKIM) Signatures , May 2007 . http:\/\/www.ietf.org\/rfc\/rfc4871.txt. E. Allman, J. Callas, M. Delany, M. Libbey, J. Fenton, and M. Thomas. DomainKeys Identified Mail (DKIM) Signatures, May 2007. http:\/\/www.ietf.org\/rfc\/rfc4871.txt."},{"key":"e_1_3_2_1_4_1","volume-title":"Proc. 16th USENIX Security Symposium","author":"Anderson D. S.","year":"2007","unstructured":"D. S. Anderson , C. Fleizach , S. Savage , and G. M. Voelker . Spamscatter: Characterizing Internet Scam Hosting Infrastructure . In Proc. 16th USENIX Security Symposium , Boston, MA , Aug. 2007 . D. S. Anderson, C. Fleizach, S. Savage, and G. M. Voelker. Spamscatter: Characterizing Internet Scam Hosting Infrastructure. In Proc. 16th USENIX Security Symposium, Boston, MA, Aug. 2007."},{"key":"e_1_3_2_1_5_1","unstructured":"A. Back. Hashcash. http:\/\/www.cypherspace.org\/adam\/hashcash\/.  A. Back. Hashcash. http:\/\/www.cypherspace.org\/adam\/hashcash\/."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.5555\/1323128.1323131"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1189769.1189779"},{"key":"e_1_3_2_1_8_1","volume-title":"First Conference on Email and Anti-Spam (CEAS)","author":"Clayton R.","year":"2004","unstructured":"R. Clayton . Stopping Spam by Extrusion Detection . In First Conference on Email and Anti-Spam (CEAS) , Mountain View, CA , July 2004 . R. Clayton. Stopping Spam by Extrusion Detection. In First Conference on Email and Anti-Spam (CEAS), Mountain View, CA, July 2004."},{"key":"e_1_3_2_1_9_1","volume-title":"Second Conference on Email and Anti-Spam (CEAS)","author":"Clayton R.","year":"2005","unstructured":"R. Clayton . Stopping Outgoing Spam by Examining Incoming Server Logs . In Second Conference on Email and Anti-Spam (CEAS) , Stanford, CA , July 2005 . R. Clayton. Stopping Outgoing Spam by Examining Incoming Server Logs. In Second Conference on Email and Anti-Spam (CEAS), Stanford, CA, July 2005."},{"key":"e_1_3_2_1_10_1","volume-title":"http:\/\/www.cloudmark.com\/serviceproviders\/authority\/spam\/","author":"Anti-Spam Cloudmark Authority","year":"2007","unstructured":"Cloudmark Authority Anti-Spam . http:\/\/www.cloudmark.com\/serviceproviders\/authority\/spam\/ , 2007 . Cloudmark Authority Anti-Spam. http:\/\/www.cloudmark.com\/serviceproviders\/authority\/spam\/, 2007."},{"key":"e_1_3_2_1_11_1","unstructured":"Commtouch Inc. 2006 Spam Trends Report: Year of the Zombies. http:\/\/www.commtouch.com\/documents\/Commtouch_200_Spam_Trends_Year_of_the_Zombies.pdf.  Commtouch Inc. 2006 Spam Trends Report: Year of the Zombies. http:\/\/www.commtouch.com\/documents\/Commtouch_200_Spam_Trends_Year_of_the_Zombies.pdf."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/1018440.1021947"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2007.35"},{"key":"e_1_3_2_1_14_1","volume-title":"CRYPTO","author":"Dwork C.","year":"1992","unstructured":"C. Dwork and M. Naor . Pricing via Processing or Combatting Junk Mail . In CRYPTO , Santa Barbara, CA , Aug. 1992 . C. Dwork and M. Naor. Pricing via Processing or Combatting Junk Mail. In CRYPTO, Santa Barbara, CA, Aug. 1992."},{"key":"e_1_3_2_1_15_1","unstructured":"P. Graham. Better Bayesian Filtering. http:\/\/www.paulgraham.com\/better.html.  P. Graham. Better Bayesian Filtering. http:\/\/www.paulgraham.com\/better.html."},{"key":"e_1_3_2_1_16_1","volume-title":"http:\/\/www.ironport.com\/","year":"2007","unstructured":"IronPort. http:\/\/www.ironport.com\/ , 2007 . IronPort. http:\/\/www.ironport.com\/, 2007."},{"key":"e_1_3_2_1_17_1","volume-title":"http:\/\/www.ironport.com\/products\/ironport_x1000.html","author":"Carrier Grade Email Security IronPort","year":"2007","unstructured":"IronPort Carrier Grade Email Security Appliance. http:\/\/www.ironport.com\/products\/ironport_x1000.html , 2007 . IronPort Carrier Grade Email Security Appliance. http:\/\/www.ironport.com\/products\/ironport_x1000.html, 2007."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/990308.990313"},{"key":"e_1_3_2_1_19_1","unstructured":"Kelly Jackson Higgins Dark Reading. Botnets Battle Over Turf. http:\/\/www.darkreading.com\/document.asp?doc_id=122116 Apr. 2007.  Kelly Jackson Higgins Dark Reading. Botnets Battle Over Turf. http:\/\/www.darkreading.com\/document.asp?doc_id=122116 Apr. 2007."},{"key":"e_1_3_2_1_20_1","volume-title":"Scalable and Reliabile Collaborative Spam Filters: Harnessing the Global Socail Email Networks. In 3rd Annual Workshop on the Weblogging Ecosystem","author":"J. Kong","year":"2006","unstructured":"J. Kong et al. Scalable and Reliabile Collaborative Spam Filters: Harnessing the Global Socail Email Networks. In 3rd Annual Workshop on the Weblogging Ecosystem , 2006 . J. Kong et al. Scalable and Reliabile Collaborative Spam Filters: Harnessing the Global Socail Email Networks. In 3rd Annual Workshop on the Weblogging Ecosystem, 2006."},{"key":"e_1_3_2_1_21_1","volume-title":"Third Annual Workshop on Economics and Information Security (WEIS)","author":"Laurie B.","year":"2004","unstructured":"B. Laurie and R. Clayton . Proof-of-Work Proves Not to Work . In Third Annual Workshop on Economics and Information Security (WEIS) , Minneapolis, MN , May 2004 . B. Laurie and R. Clayton. Proof-of-Work Proves Not to Work. In Third Annual Workshop on Economics and Information Security (WEIS), Minneapolis, MN, May 2004."},{"key":"e_1_3_2_1_22_1","volume-title":"Hseih. An Empirical Study of Clustering Behavior of Spammers and Group-based Anti-Spam Strategies. In 3rd Conference on Email and Anti-Spam (CEAS)","author":"Li F.","year":"2006","unstructured":"F. Li and M.- H. Hseih. An Empirical Study of Clustering Behavior of Spammers and Group-based Anti-Spam Strategies. In 3rd Conference on Email and Anti-Spam (CEAS) , Mountain View, CA , July 2006 . F. Li and M.-H. Hseih. An Empirical Study of Clustering Behavior of Spammers and Group-based Anti-Spam Strategies. In 3rd Conference on Email and Anti-Spam (CEAS), Mountain View, CA, July 2006."},{"key":"e_1_3_2_1_23_1","unstructured":"MailAvenger 2007. http:\/\/www.mailavenger.org\/.  MailAvenger 2007. http:\/\/www.mailavenger.org\/."},{"key":"e_1_3_2_1_24_1","unstructured":"Mail Abuse Prevention System (MAPS). http:\/\/www.mail-abuse.com\/.  Mail Abuse Prevention System (MAPS). http:\/\/www.mail-abuse.com\/."},{"key":"e_1_3_2_1_25_1","unstructured":"Messaging Anti-Abuse Working Group. MAAWG Issues First Global Email Spam Report. http:\/\/www.prnewswire.com\/cgi-bin\/stories.pl?ACCT=104&STORY=\/www\/story\/0308-2006\/0004316196 Mar. 2006.  Messaging Anti-Abuse Working Group. MAAWG Issues First Global Email Spam Report. http:\/\/www.prnewswire.com\/cgi-bin\/stories.pl?ACCT=104&STORY=\/www\/story\/0308-2006\/0004316196 Mar. 2006."},{"key":"e_1_3_2_1_26_1","unstructured":"PandaLabs Blog. Zunker Spamming Bot Front-end Analysis. http:\/\/blogs.pandasoftware.com\/blogs\/pandalabs\/archive\/2007\/05\/08\/Zunker.asx May 2007.  PandaLabs Blog. Zunker Spamming Bot Front-end Analysis. http:\/\/blogs.pandasoftware.com\/blogs\/pandalabs\/archive\/2007\/05\/08\/Zunker.asx May 2007."},{"key":"e_1_3_2_1_27_1","volume-title":"http:\/\/razor.sourceforge.net\/","author":"Prakash V.","year":"2007","unstructured":"V. Prakash . Vipul's Razor . http:\/\/razor.sourceforge.net\/ , 2007 . V. Prakash. Vipul's Razor. http:\/\/razor.sourceforge.net\/, 2007."},{"key":"e_1_3_2_1_28_1","volume-title":"http:\/\/pyzor.sourceforge.net\/","year":"2007","unstructured":"Pyzor. http:\/\/pyzor.sourceforge.net\/ , 2007 . Pyzor. http:\/\/pyzor.sourceforge.net\/, 2007."},{"key":"e_1_3_2_1_29_1","volume-title":"3rd Conference on Email and Anti-Spam (CEAS)","author":"Ramachandran A.","year":"2006","unstructured":"A. Ramachandran , D. Dagon , and N. Feamster . Can DNSBLs Keep Up with Bots ? In 3rd Conference on Email and Anti-Spam (CEAS) , Mountain View, CA , July 2006 . A. Ramachandran, D. Dagon, and N. Feamster. Can DNSBLs Keep Up with Bots? In 3rd Conference on Email and Anti-Spam (CEAS), Mountain View, CA, July 2006."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1159913.1159947"},{"key":"e_1_3_2_1_31_1","volume-title":"http:\/\/www.securecomputing.com\/","author":"Computing Secure","year":"2007","unstructured":"Secure Computing . http:\/\/www.securecomputing.com\/ , 2007 . Secure Computing. http:\/\/www.securecomputing.com\/, 2007."},{"key":"e_1_3_2_1_32_1","volume-title":"http:\/\/www.securecomputing.com\/index.cfm?skey=1612","author":"IronMail Secure Computing","year":"2007","unstructured":"Secure Computing IronMail . http:\/\/www.securecomputing.com\/index.cfm?skey=1612 , 2007 . Secure Computing IronMail. http:\/\/www.securecomputing.com\/index.cfm?skey=1612, 2007."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1016\/0890-5401(89)90067-9"},{"key":"e_1_3_2_1_34_1","unstructured":"Spam and Open-Relay Blocking System (SORBS). http:\/\/www.sorbs.net\/.  Spam and Open-Relay Blocking System (SORBS). http:\/\/www.sorbs.net\/."},{"key":"e_1_3_2_1_35_1","unstructured":"SpamAssassin 2007. http:\/\/www.spamassassin.org\/.  SpamAssassin 2007. http:\/\/www.spamassassin.org\/."},{"key":"e_1_3_2_1_36_1","unstructured":"SpamCop. http:\/\/www.spamcop.net\/.  SpamCop. http:\/\/www.spamcop.net\/."},{"key":"e_1_3_2_1_37_1","unstructured":"Spamhaus 2007. http:\/\/www.spamhaus.org\/.  Spamhaus 2007. http:\/\/www.spamhaus.org\/."},{"key":"e_1_3_2_1_38_1","volume-title":"http:\/\/www.spamhints.org\/","author":"HINTS.","year":"2007","unstructured":"Spam HINTS. http:\/\/www.spamhints.org\/ , 2007 . SpamHINTS. http:\/\/www.spamhints.org\/, 2007."},{"key":"e_1_3_2_1_39_1","unstructured":"Realtime uri blacklist. http:\/\/www.uribl.com\/.  Realtime uri blacklist. http:\/\/www.uribl.com\/."},{"key":"e_1_3_2_1_40_1","unstructured":"P. Vixie. Distributed Checksum Clearinghouse. http:\/\/www.rhyolite.com\/anti-spam\/dcc\/ 2007.  P. Vixie. Distributed Checksum Clearinghouse. http:\/\/www.rhyolite.com\/anti-spam\/dcc\/ 2007."},{"key":"e_1_3_2_1_41_1","volume-title":"Proc. 3rd Symposium on Networked Systems Design and Implementation (NSDI)","author":"Walfish M.","year":"2006","unstructured":"M. Walfish , J. Zamfirescu , H. Balakrishnan , and D. Karger . Distributed quota enforcement for spam control . In Proc. 3rd Symposium on Networked Systems Design and Implementation (NSDI) , San Jose, CA , May 2006 . M. Walfish, J. Zamfirescu, H. Balakrishnan, and D. Karger. Distributed quota enforcement for spam control. In Proc. 3rd Symposium on Networked Systems Design and Implementation (NSDI), San Jose, CA, May 2006."},{"key":"e_1_3_2_1_42_1","first-page":"4408","article-title":"Sender Policy Framework (SPF) for Authorizing Use of Domains","author":"Wong M.","year":"2006","unstructured":"M. Wong and W. Schlitt . Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail , Apr. 2006 . RFC 4408 . M. Wong and W. Schlitt. Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Apr. 2006. RFC 4408.","journal-title":"E-Mail"}],"event":{"name":"CCS07: 14th ACM Conference on Computer and Communications Security 2007","location":"Alexandria Virginia USA","acronym":"CCS07","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control","ACM Association for Computing Machinery"]},"container-title":["Proceedings of the 14th ACM conference on Computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1315245.1315288","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1315245.1315288","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T14:58:21Z","timestamp":1750258701000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1315245.1315288"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2007,10,28]]},"references-count":42,"alternative-id":["10.1145\/1315245.1315288","10.1145\/1315245"],"URL":"https:\/\/doi.org\/10.1145\/1315245.1315288","relation":{},"subject":[],"published":{"date-parts":[[2007,10,28]]},"assertion":[{"value":"2007-10-28","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}