Catching Spam by Looking at Traffic, Not Content

AngryDad writes "HexView has proposed a method to deal with spam without scanning actual message bodies. The method is based solely on traffic analysis. They call it STP (Source Trust Prediction). A server, like a Real-time Spam Black list, collects SMTP session source and destination addresses from participating Mail Transfer Agents (MTAs) and applies statistics to identify spam-like traffic patterns. A credibility score is returned to the MTA, so it can throttle down or drop possibly unwanted traffic. While I find it questionable, the method might be useful when combined with traditional keyword analysis." What do you think? Is this snake oil, or is there something to this?

Comments

host a torrent site, need an island

[Anonymous Coward]

Hi,
  I host a torrent site, I'm a pirate and we are currently trying to Purchase our rightful motherland.
RRRRRR! if you send us money so we can get our motherland, we can guarantee you citizenship and we will transfer 9,000,000,000.00 sealand dollars to your account ASAP.

Re:This is painfully obvious and hopelessly naive

[TheMeuge]

Oh how I wish I hadn't spent my mod points yesterday. Please mod parent up for a very insightful comment.