Chalmers University of Technology
Identifying unsolicited email based on their network-level behavior rather than their content have received huge interest. In this paper, the authors investigate the social network properties of large-scale email networks generated from real email traffic to reveal the properties that are indicative of spam as opposed to the expected legitimate behavior. By analyzing the structural and temporal properties of the email networks they confirm that legitimate email traffic generates a small-world, scale-free network similar to other social networks. However, email traffic as a whole contains unsolicited email, thus the structure of email networks deviates from that of social networks.