Abstract
E-mail services are essential in the Internet. However, the current e-mail architecture presents problems that open it to several threats. Alternatives have been proposed to solve some prob- lems related to e-mail services, offering reliability and scalability to such systems. This work presents a distributed trust model, allowing to create dynamic and decentralized trusted server lists, through the exclusion of servers recognized as spreaders of malicious messages. The trust model uses a social network approach and defines strategies for trust information update, propagation, and storage. A prototype was built to evaluate the proposed model’s effectiveness.
Highlights
E-mail systems are commonly used due to their simplicity, flexibility, and low costs for their implementation and usage
There are problems concerning the absence of a robust mechanism for sender authentication, poor confidentiality and integrity mechanisms for message delivery, and the lacking of a consistent reputation mechanism for users and e-mail servers
Server authentication mechanisms by themselves are not able to minimize the sending of malicious messages
Summary
E-mail systems are commonly used due to their simplicity, flexibility, and low costs for their implementation and usage. This work presents a distributed trust model for e-mail servers that uses e-mail classification techniques, a sender authentication model, and social networks, to create an environment able to keep information about legitimate/malicious e-mail servers using a decentralized strategy. These filters will inform whether the received e-mail is legitimate or malicious; 1The automatic building of a trust group, being a relevant research subject, is not considered here.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.