Spamalytics: an empirical analysis of spam marketing conversion

The "conversion rate" of spam -- the probability that an unsolicited e-mail will ultimately elicit a "sale" -- underlies the entire spam value proposition. However, our understanding of this critical behavior is quite limited, and the literature lacks any quantitative study concerning its true value. In this paper we present a methodology for measuring the conversion rate of spam. Using a parasitic infiltration of an existing botnet's infrastructure, we analyze two spam campaigns: one designed to propagate a malware Trojan, the other marketing on-line pharmaceuticals. For nearly a half billion spam e-mails we identify the number that are successfully delivered, the number that pass through popular anti-spam filters, the number that elicit user visits to the advertised sites, and the number of "sales" and "infections" produced. Categories and Subject Descriptors K.4.1 [Public Policy Issues]: ABUSE AND CRIME INVOLVING COMPUTERS General Terms ...

• Type: Conference
• Year: 2008
• Where: CCS
• Authors: Chris Kanich, Christian Kreibich, Kirill Levchenko, Brandon Enright, Geoffrey M. Voelker, Vern Paxson, Stefan Savage
• Keywords: CCS 2008, Conversion Rate, Half Billion Spam, Security Privacy, Spam Value Proposition