电子邮件目录收割攻击的防御

Defense of Directory Harvest Attack

为了更好地解决垃圾邮件的问题,提高对垃圾邮件的防御效果,本文从造成垃圾邮件的其中一个原因———子邮件目录收割攻击(DHA)入手,通过对DHA攻击原理的分析,提出基于黑名单同时以邮件地址阈值和IP地址阈值为锁定条件的防御策略,并在攻击资源有限的条件下对防御策略进行模拟测试。分析结果表明该防御策略能对DHA进行有效的防御,同时得出防御策略中的过滤阈值和锁定时间的设置是防御DHA的关键点。

In order to solve the problem of the spam better and improve the defense effect of the spam, beginning with the directory harvest attack （DHA） which is one of reason about the spam, through the analysis of the principle of DHA, this paper presents a defensive tactics based on the blacklist, IP address threshold and the e-mail address threshold, and makes a simulation test about the defensive tactics in a resource limited environment. The result shows that the defensive tactics are effective, and the filter threshold and lock time setting are the key point of the defensive tactics.