Spamming, Phishing, Authentication, and Privacy.
This article reports that unsolicited commercial email, or spam, peddles a variety of dubious products, ranging from pharmaceuticals to abandoned bank accounts. The so-called "phishers" try to steal user names and passwords for online banking. And then, systems are infested with viruses, worms and o...
| Published in: | Communications of the ACM Vol. 47; no. 12; pp. 144 - 145 |
|---|---|
| Main Author: | |
| Format: | Article |
| Published: |
Association for Computing Machinery
Dec2004
|
| Subjects: | |
| Online Access: | View this record in EBSCOhost |
| fields | @attributes: recordID: 1 pdfLink: plink: https://search.ebscohost.com/login.aspx?direct=true&db=hlh&AN=15278886&site=ehost-live header: @attributes: shortDbName: hlh uiTerm: 15278886 longDbName: Humanities International Complete uiTag: AN controlInfo: bkinfo: jinfo: jid: 00010782 ACM jtl: Communications of the ACM issn: 00010782 maglogo: N pubinfo: dt: Dec2004 vid: 47 iid: 12 pid: 68 pub: Association for Computing Machinery artinfo: ui: 15278886 10.1145/1035134.1035159 ppf: 144 ppct: 1 formats: tig: atl: Spamming, Phishing, Authentication, and Privacy. aug: au: Bellovin, Steven M. affil: Researcher, AT&T Labs in Florham Park, NJ. su: Spam email Computer security Computer access control Computer viruses Computer hackers Computer crimes sug: subj: Spam email Computer security Computer access control Computer viruses Computer hackers Computer crimes ab: This article reports that unsolicited commercial email, or spam, peddles a variety of dubious products, ranging from pharmaceuticals to abandoned bank accounts. The so-called "phishers" try to steal user names and passwords for online banking. And then, systems are infested with viruses, worms and other malware. Although there are would-be solutions to these problems, some of them have the potential to do far more harm than good. An obvious approach to spam fighting is some form of sender authentication. Authenticated email solves some problems. If nothing else, it hinders the spread of email worms, since the infected machine will be positively identified. Furthermore, there are some situations where a list of permitted senders is in fact used. In the best of these schemes, purported identity is used to drive some sort of challenge and response scheme. Authenticated email would provide some protection here, though even without it successful "joe jobs" — forgery of a legitimate user's identity — are relatively uncommon. pubtype: Periodical doctype: Article src: R language: English refInfo: copyright: @attributes: flag: Y dt: @attributes: year: 2004 holdings: @attributes: islocal: N |
|---|