SNARE, Gazelle, Vanish, Nemesis and Nozzle: sounds like quite the wild security conference

07.08.2009

, the brainchild of George Tech and Secure Computing researchers, is designed to foil spammers. And we can use all the help we can get on that front if recent numbers from McAfee can be believed: it found that . 

SNARE eschews spam filtering techniques based purely on identifying the content or relying on reputation-based blacklists/whitelists. Instead, SNARE zeroes in on network-level behavior ("how messages are sent") to spot spammers. This includes eyeing how far apart spammers are from their targets and each other and even what time of day they launch their messages.

recently profiled the technology, noting that one Georgia Tech researcher is helping Yahoo address spam issues by using knowledge from the SNARE project.

Nozzle

This technology is described as "  in a paper authored by Microsoft Research and Cornell University researchers. Heap-spraying, if you aren't familiar with it, refers to certain ActiveX or JavaScript routines trying to fill up browser memory until they can get a shell code and take over the computer, according to an expert quoted in an earlier Network World article. Nozzle's creators say they have come up with "a runtime monitoring infrastructure that detects attempts by attackers to spray the heap. Nozzle uses lightweight emulation techniques to detect the presence of objects that contain executable code. To reduce false positives, we developed a notion of global 'heap health'."