[VOIPSEC] VoIP Spam paper

[vijay arvind]

Hello All,

Attached is a link to a VoIP spam approach that we at the Georgia Tech
Information Security center (GTISC) are working on and was presented at the
4th conference of Email and Anti Spam:
http://www.ceas.cc/2007/papers/paper-63.pdfs

The basic idea is to try and exploit the fact that in regular communication
users both make and receive calls, while spammers are interested in only
making calls and disseminating information. Users rarely call a spammer and
even if they inadvertently do so, the call will last for a small duration.
Hence we use call duration and the directionality of calling patterns to
distinguish between a regular user and a spammer. We use basic cryptographic
primitives to encapsulate call duration as call credentials. How we combine
these call credentials using social networking theory and the Eigentrust
algorithm (PageRank) to create a spammer detecting mechanism forms the crux
of the paper.

Bouquets and Brickbats are most welcome.

Thanks,
Vijay