Commentary

Andrew Conry Murray
 

Startup Makes Bold Spam-Fighting Claims

Abaca, a startup that launched at last week's Interop NY show, claims to have developed a new approach to spam filtering that guarantees a minimum of 99 percent accuracy.

Abaca, a startup that launched at last week's Interop NY show, claims to have developed a new approach to spam filtering that guarantees a minimum of 99 percent accuracy.The company backs its claim with a guarantee to credit customers for each day the appliance fails to hit the mark (one false positive out every 20,000 messages).

Instead of focusing on mail content or the sender's reputation, Abaca calculates the probability that an incoming message is spam by looking at the distribution of spam and ham addressed to each recipient.


More SMB Insights

White Papers

More >>

Reports

More >>

Webcasts

More >>

Recipients that have a large volume of spam addressed to them have a higher probability that a new message is also spam, and vice versa for users with a lower volume of spam messages.

Abaca calls this probability a receiver's reputation, and claims it's more effective than typical header and content analysis or sender reputation techniques. That's because spammers can (and do) manipulate content elements and message origins.

Rather than get into never-ending games of one-upsmanship with manipulative spammers, Abaca tracks the reputation of each user in your organization. Each appliance also reports reputation data back to a central cloud for collective analysis. By combining the reputations of all the recipients of a specific message, Abaca says it can determine the spaminess of that message with a very high degree of accuracy.

I'm not 100 percent convinced of the validity of this approach, in part because of the chicken-or-egg problem. Abaca has to figure out which messages are spam and which aren't before it can assign a reputation to a recipient, which means the company has to do some analysis-and thus falls prey to the same weaknesses of other systems.

Abaca says it does some content analysis, but the company doesn't really say what it is. In an e-mail message seeking clarification, they said in addition to the receiver's reputations "…we also look at where the mail is coming from, if it is forwarded, if it is going to a legitimate mailbox, if we can find the 'real IP' of the sender etc." They don't maintain a database of spam signatures, perform Bayesian filtering or conduct heuristic analysis.

With those reservations in mind, it's certainly true the anti-spam fight can benefit from fresh ideas. If the concept of receiver reputation works as advertised, it would put a powerful tool in the hands of beleaguered IT professionals.

While Abaca is battling spammers, it also has its sights clearly set on Barracuda, which has done an admirable job of penetrating the SMB market with low-cost appliances. Abaca is selling appliances for up to 100 users for $1,495, and up to 1,000 users for $3,495.

The company also has long-term plans to offer a spam filtering service, a la Postini (acquired by Google), Frontbridge (acquired by Microsoft) and MessageLabs.

Abaca is privately funded.


Related Reading




Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

InformationWeek encourages readers to engage in spirited, healthy debate, including taking us to task. However, InformationWeek moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. InformationWeek further reserves the right to disable the profile of any commenter participating in said activities.

Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
T-Shirt Giveaway T-Shirt Giveaway: Each week we're selecting one great comment from our readers. The author of the comment will receive an InformaitonWeek Community t-shirt. So get posting!
Subscribe to RSS

Resource Links