Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: Virus Bulletin Spam Filter Test - SANS Internet Storm Center SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Virus Bulletin Spam Filter Test

Virus Bulletin updated its spam filter test, and found that compared to last year, spam filters are doing worse. Sadly, the detailed results are only for paid subscribers. But Virus Bulletin published a brief summary of the latest result as a teaser [1]. 

I think this is not all bad news. To understand this, one has to consider that the overall volume of spam has dropped significantly. The take down of some large botnets removed a lot of easy to classify spam off the net, leaving a more diverse "spam zoo" that is not as easy to classify. So I don't think this trend is as "worrying" as Virus Bulletin makes it sound. 




Johannes B. Ullrich, Ph.D.
SANS Technology Institute

I will be teaching next: Application Security: Securing Web Apps, APIs, and Microservices - SANS London June 2022


4473 Posts
ISC Handler
Mar 21st 2012
According to our local statistics the spam levels are fairly constant - we catch the same percentage and the actual count is also fairly stable (+/- 5%). We employ both upfront RBL blocks and spamassassin which combined remove about 90-95% of the attempted mail deliveries as spam. This leaves 1-5 daily spam messages in my inbox which are easily deleted when they arrive. No biggie. The effort that would go into making the automatic detection and filtering even better just isn't worth it as it's much easier just to hit delete a few times every day.

Sign Up for Free or Log In to start participating in the conversation!