Researchers Create Highly Predictive Blacklists

Posted by samzenpus on Wednesday July 23, 2008 @02:32PM from the evil-detector dept.

Grablets writes "Using a link analysis algorithm similar to Google PageRank, researchers at the SANS Institute and SRI International have created a new Internet network defense service that rethinks the way network blacklists are formulated and distributed. The service, called Highly Predictive Blacklisting, exploits the relationships between networks that have been attacked by similar Internet sources as a means for predicting which attack sources are likely to attack which networks in the future. A free experimental version is currently available."

1 of 71 comments (clear)

Min score:

Reason:

Sort:

Babies out with the bath water. by LostCluster · 2008-07-23 15:22 · Score: 5, Insightful

This isn't going to work in the real world. Too many users you want to hear from at an ISP won't like it when the virus-victim spammers gets their whole network preventatively banned.
Stop fixing the mail protocols we have today. It's time to replace with some form of sender authentication.