Security Basics mailing list archives

Re: Where to get spam?


From: Mark Teicher <mht3 () earthlink net>
Date: Mon, 19 Feb 2007 11:27:07 -0500 (GMT-05:00)

This is a very interesting question.  Why do you need spam from 2006/2007, SPAM TTL is <24, most SPAM engines will not 
detect SPAM > 30 days old.  I have researched this problem for over a long period of time, most anti-spam products out 
there will have issues detecting any type of spam over 2 weeks old, since keeping signature/heuristic bases that huge 
will slow down the performance of the product, which is an interesting question in of itself.  Why.. 


You are better off working with a university or local school that retains their mail for some period of time

Mark 

At 04:16 PM 2/17/2007, secbasics () dusty ece cmu edu wrote:
That was almost perfect. Unfortunately since I am correlating spam data against other traffic types, I need the spam to 
be from 2006/2007, and the most recent 
one there is 2005.

Thanks anyway though.

Aaron

On Sat, Feb 17, 2007 at 01:23:39PM +1100, David West wrote:
Try the SpamAssassin public mail corpus..
http://spamassassin.apache.org/publiccorpus/

David West

On 2/16/07, secbasics () dusty ece cmu edu <secbasics () dusty ece cmu edu> wrote:
Does anyone know organizations which give away spam captures? I mean, 
obviously I will get lots of spam just from posting on this list (;)) but 
I would like to
get more to analyze. It seems like every couple months some student does a 
project which requires spam but they always have to start from ground 
zero. Isn't
there anywhere which gives spam to security researchers?

Thanks

Aaron



Current thread: