Security Basics mailing list archives

RE: Spam prevention vs mitigation


From: "Erik Soosalu" <erik.soosalu () calyxinc com>
Date: Thu, 12 Apr 2012 12:57:24 -0400

The issue with attempting 100% spam prevention is that the false
positive rate will go up.  So if you catch 100% of the spam, but lose 1%
of your email to false positives, is that a good thing?

That being said, a let through rate of 3-6 spam/user/day is overly high.

Thanks,
Erik 


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Steve Sirag
Sent: Thursday, April 12, 2012 12:05 PM
To: security-basics () securityfocus com
Subject: Spam prevention vs mitigation

Hi,

My bosses are demanding 100% spam prevention, and I'd like to find some
industry papers, articles, etc that explains why that's not advisable
(if
even possible).  My understanding is that spam mitigation is the goal,
keeping spam down to where it's not a distraction from business.  Our
current spam level is roughly 3-6 spams received per user per day.  That
seems manageable to me, but I'd like the extra ammunition going into the
meeting.

Can anyone help?

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an
SSL certificate.  We look at how SSL works, how it benefits your company
and how your customers can tell if a site is secure. You will find out
how to test, purchase, install and use a thawte Digital Certificate on
your Apache web server. Throughout, best practices for set-up are
highlighted to help you ensure efficient ongoing management of your
encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: