My recent posts have discussed identifying commonalities in new occurrences of spam, and concerns to keep in mind regarding indirect attacks using email as a vector. A strong perimeter defense and solid virus protection, along with an effective anti-spam solution can lull us into a false sense of security. The seemingly constant stream of unwanted mail begins to look like little more than an annoyance and not a continuing threat. In this post let’s examine technically other methods of attack, how to recognize them, and ways and means to defend against them.

Attacks against email servers, systems, and infrastructure are in many ways similar to attacks against other Internet-facing services, but are different in several important ways. Just as a concerted attack that brings down your Web servers stops communication with customers, vendors, and others on the Internet, the same is true for email communication attacks.

Continue reading Email Attacks and Defense Against Them