Zero-Day spam in Microsoft's aim
By Jerome Saiz, Tue, November 13th, 2007
Last edited 2007/12/23
Microsoft's Vinny Gullotto used the term "Zero-Day Spam" trying to illustrate what he thinks would be Microsoft's best interest in antispam R&D
Confronted to a question about Microsoft's lack of a good antispam solution, Vinny Gullotto, head of all things malware with Microsoft, went to describe what he calls "Zero-Day Spam" as a way to fight the spam epidemic. The term was already briefly mentioned by Trend Micro earlier.
Gullotto's vision is to use incoming emails as the starting point of a real-time investigation to follow the malware path. He justified this by explaining how each malicious spam has someting in common : it starts a chain of events having for final objective to steal or exploit something.
The idea is to go from one hop to the other starting with data found in the email, and check at each stop if it related to malicious activity. This could lead to identify unknown spam using new stealthy techniques by uncovering their ties to known malicious activities (exploit droping websites, offshore prescription drug selling sites, fake Rolex boutiques, etc... for example)
Of course, this is not much different from what Websense / Surfcontrol is doing, and it does not take in account the Pump & Dump kind of spam. But the term is catchy.
Into IAM ?
The IAM 2008 Series
SecurityNewsletter interviews major Identity & Access Management players to give you the lead on what IAM will be in 2008.

Print this news
