Keyword filtering is a commonly used way to select, from a set of intercepted messages, those that need further scrutiny. An obvious countermeasure is to replace words that might be on a keyword list by others. We show that this strategy itself creates a signature in the altered messages that makes them readily detectable using several forms of matrix decomposition. Not only can unusual messages be detected, but sets of related messages can be detected as conversations, even when their endpoints have been obscured (by using transient email addresses, stolen cell phones and so on). © Springer-Verlag Berlin Heidelberg 2005.
CITATION STYLE
Skillicorn, D. B. (2005). Beyond keyword filtering for message and conversation detection. In Lecture Notes in Computer Science (Vol. 3495, pp. 231–243). Springer Verlag. https://doi.org/10.1007/11427995_19
Mendeley helps you to discover research relevant for your work.