National Spam Threat Management: With Case Studies of Spam Incidents Analysis

Spam in today's globally interconnected world has gone far beyond the nuisance in end users' mailboxes. It consumes significant network bandwidth, server resources, and management man power, raising many other complex problems. It is increasingly used as an infection vector for malware and social engineering attacks. This paper introduces the national spam threat management system operated by Korea Information Security Agency along with the current achievements gained by the system. It comprises three subsystems: KISARBL, Email Spam Trap, and APRBL. KISARBL (Korea Information Security Agency Real time Block List) generates spam IP blocking lists and manages the reputation of the mail sender. Spam Trap actively collects and analyzes .4 million spam messages every day.