Metrics and SPAM

Published: 2009-12-13
Last Updated: 2009-12-13 22:17:03 UTC
by Mark Hofman (Version: 1)
8 comment(s)

 

Like all good security people I regularly look at different metrics to see what is going on in the environment.  Usually this is a bit of a ho hum task, but every now and then you do come across something interesting.  I find it helps to graphically represent the information as abnormalities often jump out at you which otherwise might not be as obvious.

Take the graph on the left.  This represents the SPAM traffic received in a month.  August and September are fairly steady a noticeable drop in October in email received and then, Whoa! What is going on in November?  Email messages received increased by more than 100% and the yellow line shows that the majority is SPAM.  It is not exactly parallel to the received line so either normal mail increased as well or more SPAM was missed by the tool used to block SPAM.  Both are worth investigating further.  

Metrics, especially visualised metrics, can be very effective in identifying whether you need to jump and fix something or whether it is business as usual.

Now all of you use some form of metrics in your organisation for security and I can guarantee that others are looking for useful metrics that they can apply in their environment. So if you are using a nifty metric that is easy to obtain and you are willing to share with the rest of us let us know.

(On a second note, if you SPAM increased by similar numbers in November, I'd be interested as well)

Mark H - Shearwater

 

 

Keywords:
8 comment(s)

Comments

cwqwqwq
eweew<a href="https://www.seocheckin.com/edu-sites-list/">mashood</a>
WQwqwqwq[url=https://www.seocheckin.com/edu-sites-list/]mashood[/url]
dwqqqwqwq mashood
[https://isc.sans.edu/diary.html](https://isc.sans.edu/diary.html)
[https://isc.sans.edu/diary.html | https://isc.sans.edu/diary.html]
What's this all about ..?
password reveal .
<a hreaf="https://technolytical.com/">the social network</a> is described as follows because they respect your privacy and keep your data secure:

<a hreaf="https://technolytical.com/">the social network</a> is described as follows because they respect your privacy and keep your data secure. The social networks are not interested in collecting data about you. They don't care about what you're doing, or what you like. They don't want to know who you talk to, or where you go.

<a hreaf="https://technolytical.com/">the social network</a> is not interested in collecting data about you. They don't care about what you're doing, or what you like. They don't want to know who you talk to, or where you go. The social networks only collect the minimum amount of information required for the service that they provide. Your personal information is kept private, and is never shared with other companies without your permission
https://thehomestore.com.pk/

Diary Archives