spacer home

spacer


Idalis Anti-Spammer™ and ViDentify™ System
Pros - Identifies similar e-mail messages and viruses and compares their characteristics to see whether the sender is being randomized, or being sent from multiple open relay servers. Removes domains and raises spammer costs while also lowering their chance of revenues through permanent point of contact (URL, e-mail, phone number) filtering and site blocking. Only has to identify new spam characteristics daily (1% average of new spam, accuracy approximately 99.9+%) versus other "filtering" systems (100% of all unknown and changed spam, 95% accurate). Can report abuse complaints to spam website hosts, blocks illegally marketed websites (BrowseSafe). ViDentify, which is included in the Gateway product, can identify and contain e-mail based viruses faster than other manual based innoculation products.

Creates interconnected real time URL and spam "zombie" blocking filter across every Idalis customer. Every detection signature flagged as bulk is confirmed and organized by a human confirmation to prevent spoofing and ensure accuracy. Detects and blocks phishing or other scam emails with very little end user intervention.


Cons- The Idalis technologies are new and need proven in the large Enterprise before administrators have validation (and testimonial) to adopt cost/performance enhancing services.

Bayesian, Statistical Analysis, Pattern Matching, DNA Filtering
Pros - does good job of sorting spam from legitimate mail. Widely distributed with the core technology being free and many client side versions are available. These technologies act as a supplement to Idalis based technologies for spam without an identifiable point of contact.

Cons - "The Bayesian Effect" or endless game of cat and mouse. So long as an analysis filter can be broken or defeated spammers will send to it. Cannot prove to the "spammer" the message is being deleted even if it is. Machine learning can delete wrongly reported e-mail in the future (corpora poisoning). 100% accuracy requires user to review all bulk e-mail (time loss) and also requires end user configurations (user difficulty).

These types of filtering do nothing proactive to get rid of the sending or spammers causing the problem, making these technologies self-justifying. Can not ruin spammers and has proven over the last 10 years to have a reverse negative effect on internet e-mail. Too many variations in filters for "standardized" global effectiveness. The "Bayesian Effect" is the term given to the cause and effect relationship that happens when Bayesian or statistical filters are the primary technology used to combat spam and e-mail fraud. The Bayesian or Statistical filters actually generate more spam since they allow an 'acceptable' amount of spam to pass, which allows the spammer to still generate revenue, but in order to maintain his revenue - he has to send more spam and that increased overall level of spam has a greater chance of making it into an inbox. (counterproductive) and forces customer to purchase additional equipment to cover overhead.

Only 93-95% accurate in detecting and deleting spam daily. Cannot guarantee a message will be deleted if previously detected, including the spammer point of contact. Does not utilize URL filtering or other kill file technologies since these technologies have no means of insuring accuracy.

Challenge Response
Pros - Stops mail from reaching inbox unless authorized or confirmed by the sender. Works on server or client level.

Cons - requires recipient administrative time for senders who won't or can't confirm their e-mail address (time loss). Takes sender twice as much time to send first contact e-mail message. Surveys show request for sender to confirm e-mail address is "intrusive". Difficult to receive confirmation emails from legit companies who send automated e-mail (must require end user review time). Some systems can be authorized with an auto responder bounce back. Confirms actual address and could allow address spoofing with commonly used addresses. Requires user review time. Impossible to implement internet wide. Generates high number outgoing messages.

Reverse DNS Checking, Message Signing
Pros - free to use from respected vendors

Cons - is already helping legitimize signed spam messages being flagged by Bayesian filters. Domain reverse DNS addresses easily spoofed with lookup. Legitimate relaying harms messages (using own email with another server due to ISP restrictions). Won't work for many .cgi forms or mail forwarding. Vendors admit that reverse DNS checking cannot be end all to spam problem because of forging. Virus authors could use free available code to legitimize their infected messages right on the infected computer.

Relay Blacklisting
Pros - freely available non-profit donation based service for mail servers and anti-spam vendors. Rejects mail from servers that have been relayed through. Can block incoming mail before connecting.

Cons - Requires manual reporting or large sample to identify signature. Since 1998 has not decreased the amount of spam e-mail being send to computer users. Nightmare for network administrators who have been blacklisted and are now having their legitimate e-mail blocked.