[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
more news from Google
- Subject: more news from Google
- From: smb at cs.columbia.edu (Steven Bellovin)
- Date: Wed, 13 Jan 2010 17:31:46 -0500
- In-reply-to: <255275490-1263421495-cardhu_decombobulator_blackberry.rim.net-196880606-@bda062.bisx.prod.on.blackberry>
- References: <255275490-1263421495-cardhu_decombobulator_blackberry.rim.net-196880606-@bda062.bisx.prod.on.blackberry>
On Jan 13, 2010, at 5:26 PM, msheldon at cox.net wrote:
> From a single detection of one hostile email you can often expand the picture to many mail recipients. A little open source research identifies the common community the recipients belong to. It's pretty straight forward.
>
The magic phrase is "traffic analysis" -- look at the accounts of known targets of interest, and see the usernames, IP addresses, etc., of their correspondents. Recurse as needed.
--Steve Bellovin, http://www.cs.columbia.edu/~smb