Honeypots mailing list archives

Re: SMTP Honeypots & Honeytokens


From: Nicolas STAMPF <stampf.bes () free fr>
Date: Wed, 24 Dec 2003 13:47:37 +0100

Selon Ian Baker <ibaker () codecutters org>:
(...)
At time of writing, that was 113 hours ago. Since then, 180, messages have
been sent to the honeypot, of which 55 would have passed as legitimate
emails.

Clearly, then, the technique works as an anti-spam measure.

(...)


Thoughts, anyone?

Thumbs up for the "early worm detection" part, nothing else to say.

Just a quick note about the bayesian filtering and the SMTP honeypot part.

Could it be possible to have multiple of such computer installed in a few 
places on the net, and have their spam hashed, processed through a bayesian 
filter, put in common and offered to the community as a downloadable 
initialization package for your very personal bayesian filter?

By feeding the system with spam from all over the world, it could end up as 
being very effective, and improve the results of a bayesian filter.

Just my 0.02 eurocents.

Nicolas STAMPF


Current thread: