Open Reputation System for Email

Cheap Rides for Internet Abusers & Related Data Points for Email Reputation

April Lorenzen (Outbound Index) — Sun, 05 Feb 2006 12:02:17 +1300

"One of the measures of interest is the size of the "free license to abuse" window. Is the window between detectable illicit action and termination long enough to get off a profitable phishing or spamming run? Is the initial screening process left so open that numerous such incidents are going to keep occuring? Ok, so noted in the service provider's Vetting Effectiveness Profile."

DCC Reputation

April Lorenzen — Wed, 09 Nov 2005 08:21:30 +1300

DCC offers an IP based reputation score given as the percentage of "bulk" mail seen from that IP. The IP reputation scoring is only available on the proprietary commercial version of DCC, according to http://www.rhyolite.com/anti-spam/dcc/reputations.html

Phishing Site Take Down Research Project

April Lorenzen (Outbound Index) — Sat, 17 Sep 2005 12:30:32 +1200

The following is presented to encourage comments and discussion about a short research project designed to illumiate the existing state ...

Industry Classification Index for Email Sources

April Lorenzen (Outbound Index) — Mon, 08 Aug 2005 03:40:49 +1200

Excerpt

Classification may be the work of Reputation Collectors, or of Reputation Aggregators, or perhaps ideally an open system that can handle a "source" record. Source is who put this record in, who thinks the classification is X.

You can then choose which source(s) you will use/trust. You could selectively drop (ignore) sources you find you don't want to trust. You could set up your own interpretation / voting:

- Source "ReSpam" says this sender is a school

- Source "Montgomery Report" says this sender allows anonymous webmail signups and has no outbound rate limiting.

I am not suggestion that this classification system become a reputation system unto itself, with evidence files or an unlimited number of data points. Rather that it stick to a narrowly defined area of "classifications useful in differentiating characteristics of email sources." Other reputation collectors could reference the ID or classification numbers in this system if they wished to, and attach other data points within their own databases.

Reactive vs Predictive Email Reputation Collectors

April Lorenzen — Mon, 01 Aug 2005 07:00:18 +1200

My favored predictive collectors focus on factors that can be measured before the message is accepted, even before the first spam from a new run is accepted. I also like predictive collectors that focus on positive or "good" characteristics rather than characteristics of "bad" senders.