Combating Spyware in the Enterprise

116 Chapter 4 • Real Spyware—Crime, Economic Espionage, and Espionage

E-mail filtering service providers, such as MailFrontier and MessageLabs,

provide heuristics filtering that analyzes e-mails for a wide range of phishing

attack characteristics v^hich yield a percentage of confidence that the e-mail is

or is not a phishing attack or spam. Web filtering products and services such

as Websense protect an enterprise by blocking access to known phishing sites

or sites that exhibit phishing characteristics.

Bot Detection

Botnets can be difficult to detect on a compromised host, but recently,

Portland State University's Jim Binkley, a PSU professo ...