A hardware architecture of stateless open digest spam fingerprinting unit

Spam has become one of the main problems for email users and servers. Approximately around 75 % of all sent emails is spam. Currently spam detection is being done at email servers on application layer which need to store all TCP packets of an email and then use spam detection methods after reassembl...

Full description

Bibliographic Details
Main Author: Monemi, Alireza
Format: Thesis
Published: 2010
Subjects:
_version_ 1796856288364199936
author Monemi, Alireza
author_facet Monemi, Alireza
author_sort Monemi, Alireza
collection ePrints
description Spam has become one of the main problems for email users and servers. Approximately around 75 % of all sent emails is spam. Currently spam detection is being done at email servers on application layer which need to store all TCP packets of an email and then use spam detection methods after reassembling. The spam detection technique on the application layer is slow and cannot cope with the current speed of the internet. If email classes could be estimated before being accepted by receiving MTAs for queuing, better spam handling strategies could be utilized. The aim of this project is divided in two parts. First to develop an inline Internet Protocol wrapper that is capable for processing packets for stateless content classification. The second aim is to the development of a hardware spam detection unit based on Nilsimsa fingerprinting algorithm. The IP wrapper is implemented successfully on hardware. This unit increases the Ethernet speed from 25 Mbit/s to 85 Mbit/s and provides a simple interface to transfer and receive packets from Ethernet port. IP Wrapper also provides extra time to process received packets for the microcontroller. In this project we present hardware architecture of a modified form of Nilsimsa algorithm to be implemented on hardware for higher fingerprinting throughput while having the same accuracy as the original algorithm. The improvement is noticeable in the term of processing speed and hardware allocated resources, and the accuracy tested on false positive spam detection. The implemented algorithm works with the operation frequency up to 123 MHz and has the throughput of 1 byte per 2 clock cycles (4 bit per clock cycle). Our system also needs extra 512 clock cycles after receiving whole of the message to complete the computation of Nilsimsa fingerprint.
first_indexed 2024-03-05T18:40:49Z
format Thesis
id utm.eprints-26770
institution Universiti Teknologi Malaysia - ePrints
last_indexed 2024-03-05T18:40:49Z
publishDate 2010
record_format dspace
spelling utm.eprints-267702017-08-23T02:07:05Z http://eprints.utm.my/26770/ A hardware architecture of stateless open digest spam fingerprinting unit Monemi, Alireza TK Electrical engineering. Electronics Nuclear engineering Spam has become one of the main problems for email users and servers. Approximately around 75 % of all sent emails is spam. Currently spam detection is being done at email servers on application layer which need to store all TCP packets of an email and then use spam detection methods after reassembling. The spam detection technique on the application layer is slow and cannot cope with the current speed of the internet. If email classes could be estimated before being accepted by receiving MTAs for queuing, better spam handling strategies could be utilized. The aim of this project is divided in two parts. First to develop an inline Internet Protocol wrapper that is capable for processing packets for stateless content classification. The second aim is to the development of a hardware spam detection unit based on Nilsimsa fingerprinting algorithm. The IP wrapper is implemented successfully on hardware. This unit increases the Ethernet speed from 25 Mbit/s to 85 Mbit/s and provides a simple interface to transfer and receive packets from Ethernet port. IP Wrapper also provides extra time to process received packets for the microcontroller. In this project we present hardware architecture of a modified form of Nilsimsa algorithm to be implemented on hardware for higher fingerprinting throughput while having the same accuracy as the original algorithm. The improvement is noticeable in the term of processing speed and hardware allocated resources, and the accuracy tested on false positive spam detection. The implemented algorithm works with the operation frequency up to 123 MHz and has the throughput of 1 byte per 2 clock cycles (4 bit per clock cycle). Our system also needs extra 512 clock cycles after receiving whole of the message to complete the computation of Nilsimsa fingerprint. 2010 Thesis NonPeerReviewed Monemi, Alireza (2010) A hardware architecture of stateless open digest spam fingerprinting unit. Masters thesis, Universiti Teknologi Malaysia, Faculty of Electrical Engineering. http://libraryopac.utm.my/client/en_AU/main/search/results?qu=A+hardware+architecture+of+stateless+open+digest+spam+fingerprinting+unit&te=
spellingShingle TK Electrical engineering. Electronics Nuclear engineering
Monemi, Alireza
A hardware architecture of stateless open digest spam fingerprinting unit
title A hardware architecture of stateless open digest spam fingerprinting unit
title_full A hardware architecture of stateless open digest spam fingerprinting unit
title_fullStr A hardware architecture of stateless open digest spam fingerprinting unit
title_full_unstemmed A hardware architecture of stateless open digest spam fingerprinting unit
title_short A hardware architecture of stateless open digest spam fingerprinting unit
title_sort hardware architecture of stateless open digest spam fingerprinting unit
topic TK Electrical engineering. Electronics Nuclear engineering
work_keys_str_mv AT monemialireza ahardwarearchitectureofstatelessopendigestspamfingerprintingunit
AT monemialireza hardwarearchitectureofstatelessopendigestspamfingerprintingunit