Re: ISP port blocking practice

[Zhiyun Qian <zhiyunq () umich edu>]

Suresh, thanks for your interest. I see you've had a lot of experience in fighting spam, so you must have known this. 
Yes, I know this spamming technique has been around for a while. But it's surprising to see that the majority of the 
ISPs that we studied are still vulnerable to this attack.  That probably indicates that it is not as widely known as we 
would expect. So I thought it would be beneficial to raise the awareness of the problem. 

In terms of more results, the paper is the most detailed document we have. Otherwise, if you interested in the data 
that we collected (which ISPs or IP ranges are vulnerable to this attack). We can chat offline.

Regards.
-Zhiyun
On Sep 2, 2010, at 8:19 PM, Suresh Ramasubramanian wrote:

> Zhiyun, this is by far the most comprehensive paper I've seen on
> asymmetric routing spam .. a technique that's as old as, for example,
> Alan Ralsky.  So been around for about a decade.
>
> Congratulations, great effort.  Do you have more results available (in
> more detail than were published in this paper)?  Should be worth
> seeing.
>
> thanks
> --srs
>
> On Fri, Sep 3, 2010 at 3:29 AM, Zhiyun Qian <zhiyunq () umich edu> wrote:
> > Sorry for bringing this old topic back. But we have made some academic effort investigating the spamming behaviors 
> > using assymetric routing (we named it "triangualr spamming"). This work appeared in this year's IEEE Security & 
> > Privacy conference. You can take a look at it if you are interested (and feedbacks are welcome):
> >
> > http://www.eecs.umich.edu/~zhiyunq/pub/oakland10_triangular-spamming.pdf
>
>
>
> -- 
> Suresh Ramasubramanian (ops.lists () gmail com)