SlideShare a Scribd company logo
1 of 53
OWASP – Web Spam Techniques Roberto Suggi Liverani Security Consultant Security-Assessment.com 29 April 2008
Who am I? ,[object Object],[object Object],[object Object],[object Object]
Agenda ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam - Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam – White Hat and Black Hat SEO ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
The Web Spam Business ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam – Aggressive Black Hat SEO ,[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam – The “online pharmacy” industry ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam – Affiliate/Associate Programs  ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam – Affiliate/Associate Programs ,[object Object],[object Object],[object Object],[object Object]
Web Spam – Affiliate/Associate Programs ,[object Object]
Web Spam – Affiliate/Associate Programs ,[object Object],[object Object]
Web Spam – So how does it work? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam – Online Pharmacy Keywords ,[object Object],Keywords Google Yahoo Live Spam Links Buy viagra online 11,200,000 44,600,000 57,400,000 G:4/10 Y:6/10 L:10/10 Cheap viagra 12,100,100 36,700,000 53,100,000 G:7/10 Y:7/10 L:9/10 Buy cialis online 7,810,000 33,400,000 25,000,000 G:8/10 Y:9/10 L:10/10 Buy phentermine online 4,340,000 27,000,000 52,600,000 G:8/10 Y:8/10 L:10/10
Web Spam – Recognising web spam links ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Studies ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study I ,[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study I ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study I ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],PR Google Index Google Links Yahoo Index Yahoo Links Yahoo Link domains Live Index MSN Links Alexa Rank Online Since 5 1590 112 1530 433 19726 7220 1 836238 Aug 2003
Web Spam Techniques – Case Study I ,[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study I ,[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study I ,[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study I ,[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study II ,[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study II ,[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study II ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],PR Google Index Google Links Yahoo Index Yahoo Links Yahoo Link domains Live Index MSN Links Alexa Rank Online Since 6 6530 399 8640 25 8123 18900 0 370332 Nov 1996
Web Spam Techniques – Case Study II ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study II ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study II ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study II ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study III ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study III ,[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study III ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],PR Google Index Google Links Yahoo Index Yahoo Links Yahoo Link domains Live Index MSN Links Alexa Rank Online Since 6 586000 3660 231887 73748 1010000 476000 0 9102 Jun 2006
Web Spam Techniques – Case Study III ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study III ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study III ,[object Object]
Web Spam Techniques – Case Study III ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study III ,[object Object],[object Object]
Web Spam Techniques – Case Study III ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study III ,[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study IV ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study III ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],PR Google Index Google Links Yahoo Index Yahoo Links Yahoo Link domains Live Index MSN Links Alexa Rank Online Since 6 14700 2960 19400 23874 119300 159000 3 165573 Apr 1997
Web Spam Techniques – Case Study IV ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study IV ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study IV ,[object Object],[object Object]
Web Spam Techniques – Case Study IV ,[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Case Study IV ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam – Security Considerations ,[object Object],[object Object],[object Object],[object Object]
Web Spam – Security Recommendations ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques – Questions? ,[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques - Disclaimer ,[object Object],[object Object],[object Object]
Web Spam Techniques - References ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]
Web Spam Techniques - References ,[object Object],[object Object],[object Object]

More Related Content

What's hot

Web application security & Testing
Web application security  & TestingWeb application security  & Testing
Web application security & Testing
Deepu S Nath
 
HTTP Parameter Pollution Vulnerabilities in Web Applications (Black Hat EU 2011)
HTTP Parameter Pollution Vulnerabilities in Web Applications (Black Hat EU 2011)HTTP Parameter Pollution Vulnerabilities in Web Applications (Black Hat EU 2011)
HTTP Parameter Pollution Vulnerabilities in Web Applications (Black Hat EU 2011)
Marco Balduzzi
 
Web Application Security and Awareness
Web Application Security and AwarenessWeb Application Security and Awareness
Web Application Security and Awareness
Abdul Rahman Sherzad
 

What's hot (20)

Top 10 Web Security Vulnerabilities (OWASP Top 10)
Top 10 Web Security Vulnerabilities (OWASP Top 10)Top 10 Web Security Vulnerabilities (OWASP Top 10)
Top 10 Web Security Vulnerabilities (OWASP Top 10)
 
Web application security & Testing
Web application security  & TestingWeb application security  & Testing
Web application security & Testing
 
Bug Bounty Basics
Bug Bounty BasicsBug Bounty Basics
Bug Bounty Basics
 
Sql injection
Sql injectionSql injection
Sql injection
 
CSE-Ethical-Hacking-ppt.pptx
CSE-Ethical-Hacking-ppt.pptxCSE-Ethical-Hacking-ppt.pptx
CSE-Ethical-Hacking-ppt.pptx
 
Sql injections - with example
Sql injections - with exampleSql injections - with example
Sql injections - with example
 
Bug Bounty Hunter Methodology - Nullcon 2016
Bug Bounty Hunter Methodology - Nullcon 2016Bug Bounty Hunter Methodology - Nullcon 2016
Bug Bounty Hunter Methodology - Nullcon 2016
 
HTTP Parameter Pollution Vulnerabilities in Web Applications (Black Hat EU 2011)
HTTP Parameter Pollution Vulnerabilities in Web Applications (Black Hat EU 2011)HTTP Parameter Pollution Vulnerabilities in Web Applications (Black Hat EU 2011)
HTTP Parameter Pollution Vulnerabilities in Web Applications (Black Hat EU 2011)
 
Server-side template injection- Slides
Server-side template injection- Slides Server-side template injection- Slides
Server-side template injection- Slides
 
Introduction to penetration testing
Introduction to penetration testingIntroduction to penetration testing
Introduction to penetration testing
 
Security testing
Security testingSecurity testing
Security testing
 
Web Hacking
Web HackingWeb Hacking
Web Hacking
 
Penetration testing
Penetration testingPenetration testing
Penetration testing
 
Web Application Security and Awareness
Web Application Security and AwarenessWeb Application Security and Awareness
Web Application Security and Awareness
 
Pentesting Using Burp Suite
Pentesting Using Burp SuitePentesting Using Burp Suite
Pentesting Using Burp Suite
 
Web application Security tools
Web application Security toolsWeb application Security tools
Web application Security tools
 
Aula 8 - SQL Injection
Aula 8 - SQL InjectionAula 8 - SQL Injection
Aula 8 - SQL Injection
 
Ch 10: Hacking Web Servers
Ch 10: Hacking Web ServersCh 10: Hacking Web Servers
Ch 10: Hacking Web Servers
 
Cross Site Scripting ( XSS)
Cross Site Scripting ( XSS)Cross Site Scripting ( XSS)
Cross Site Scripting ( XSS)
 
Phishing Detection using Machine Learning
Phishing Detection using Machine LearningPhishing Detection using Machine Learning
Phishing Detection using Machine Learning
 

Similar to Web Spam Techniques

How to get more quality partners
How to get more quality partnersHow to get more quality partners
How to get more quality partners
maosongppt
 
How to get more quality partners
How to get more quality partnersHow to get more quality partners
How to get more quality partners
maosongppt
 
Common mistakes stagnating your affiliate programme's growth - Geno Prussakov
Common mistakes stagnating your affiliate programme's growth - Geno PrussakovCommon mistakes stagnating your affiliate programme's growth - Geno Prussakov
Common mistakes stagnating your affiliate programme's growth - Geno Prussakov
auexpo Conference
 
seo-ppt.pptx
seo-ppt.pptxseo-ppt.pptx
seo-ppt.pptx
Poriumlimited
 
Protecting Microsoft Teams from Cyber Security Threats - a Practical Guide
Protecting Microsoft Teams from Cyber Security Threats - a Practical GuideProtecting Microsoft Teams from Cyber Security Threats - a Practical Guide
Protecting Microsoft Teams from Cyber Security Threats - a Practical Guide
Benedek Menesi
 

Similar to Web Spam Techniques (20)

Web spam
Web spamWeb spam
Web spam
 
The Nitty Gritty of Affiliate Marketing Compliance
The Nitty Gritty of Affiliate Marketing ComplianceThe Nitty Gritty of Affiliate Marketing Compliance
The Nitty Gritty of Affiliate Marketing Compliance
 
White hat and black hat differences
White hat and black hat differencesWhite hat and black hat differences
White hat and black hat differences
 
Different Module of Digital Marketing
Different Module of Digital MarketingDifferent Module of Digital Marketing
Different Module of Digital Marketing
 
A SURVEY ON WEB SPAM DETECTION METHODS: TAXONOMY
A SURVEY ON WEB SPAM DETECTION METHODS: TAXONOMYA SURVEY ON WEB SPAM DETECTION METHODS: TAXONOMY
A SURVEY ON WEB SPAM DETECTION METHODS: TAXONOMY
 
Google Places - Your Information on the Net
Google Places - Your Information on the NetGoogle Places - Your Information on the Net
Google Places - Your Information on the Net
 
Seo Analysis Report
Seo Analysis ReportSeo Analysis Report
Seo Analysis Report
 
Reducing Server Resources: Improve Costs, SEO, Conversions & UX
Reducing Server Resources: Improve Costs, SEO, Conversions & UXReducing Server Resources: Improve Costs, SEO, Conversions & UX
Reducing Server Resources: Improve Costs, SEO, Conversions & UX
 
Optimising Google's Knowledge Graph - #SMX Munich
Optimising Google's Knowledge Graph - #SMX MunichOptimising Google's Knowledge Graph - #SMX Munich
Optimising Google's Knowledge Graph - #SMX Munich
 
Get More Traffic
Get  More  TrafficGet  More  Traffic
Get More Traffic
 
Exploring And Investigating New Dimensions In Phishing
Exploring And Investigating New Dimensions In PhishingExploring And Investigating New Dimensions In Phishing
Exploring And Investigating New Dimensions In Phishing
 
How to get more quality partners
How to get more quality partnersHow to get more quality partners
How to get more quality partners
 
How to get more quality partners
How to get more quality partnersHow to get more quality partners
How to get more quality partners
 
Common mistakes stagnating your affiliate programme's growth - Geno Prussakov
Common mistakes stagnating your affiliate programme's growth - Geno PrussakovCommon mistakes stagnating your affiliate programme's growth - Geno Prussakov
Common mistakes stagnating your affiliate programme's growth - Geno Prussakov
 
seo-ppt.pptx
seo-ppt.pptxseo-ppt.pptx
seo-ppt.pptx
 
IRJET- Phishing Website Detection System
IRJET- Phishing Website Detection SystemIRJET- Phishing Website Detection System
IRJET- Phishing Website Detection System
 
Protecting Microsoft Teams from Cyber Security Threats - a Practical Guide
Protecting Microsoft Teams from Cyber Security Threats - a Practical GuideProtecting Microsoft Teams from Cyber Security Threats - a Practical Guide
Protecting Microsoft Teams from Cyber Security Threats - a Practical Guide
 
5 Ways To Identify Blog Spam (As A Business Owner)
5 Ways To Identify Blog Spam (As A Business Owner)5 Ways To Identify Blog Spam (As A Business Owner)
5 Ways To Identify Blog Spam (As A Business Owner)
 
SEO & Content Areas for Growth in 2019
SEO & Content Areas for Growth in 2019 SEO & Content Areas for Growth in 2019
SEO & Content Areas for Growth in 2019
 
Search Engine Optimization ppt
Search Engine Optimization pptSearch Engine Optimization ppt
Search Engine Optimization ppt
 

More from Roberto Suggi Liverani

More from Roberto Suggi Liverani (13)

I got 99 trends and a # is all of them
I got 99 trends and a # is all of themI got 99 trends and a # is all of them
I got 99 trends and a # is all of them
 
Augmented reality in your web proxy
Augmented reality in your web proxyAugmented reality in your web proxy
Augmented reality in your web proxy
 
Cross Context Scripting attacks & exploitation
Cross Context Scripting attacks & exploitationCross Context Scripting attacks & exploitation
Cross Context Scripting attacks & exploitation
 
Window Shopping Browser - Bug Hunting in 2012
Window Shopping Browser - Bug Hunting in 2012Window Shopping Browser - Bug Hunting in 2012
Window Shopping Browser - Bug Hunting in 2012
 
None More Black - the Dark Side of SEO
None More Black - the Dark Side of SEONone More Black - the Dark Side of SEO
None More Black - the Dark Side of SEO
 
Bridging the gap - Security and Software Testing
Bridging the gap - Security and Software TestingBridging the gap - Security and Software Testing
Bridging the gap - Security and Software Testing
 
Defending Against Application DoS attacks
Defending Against Application DoS attacksDefending Against Application DoS attacks
Defending Against Application DoS attacks
 
Exploiting Firefox Extensions
Exploiting Firefox ExtensionsExploiting Firefox Extensions
Exploiting Firefox Extensions
 
Black Energy18 - Russian botnet package analysis
Black Energy18 - Russian botnet package analysisBlack Energy18 - Russian botnet package analysis
Black Energy18 - Russian botnet package analysis
 
XPath Injection
XPath InjectionXPath Injection
XPath Injection
 
Reversing JavaScript
Reversing JavaScriptReversing JavaScript
Reversing JavaScript
 
Ajax Security
Ajax SecurityAjax Security
Ajax Security
 
Browser Security
Browser SecurityBrowser Security
Browser Security
 

Recently uploaded

Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
panagenda
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
Joaquim Jorge
 

Recently uploaded (20)

Why Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire businessWhy Teams call analytics are critical to your entire business
Why Teams call analytics are critical to your entire business
 
Data Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt RobisonData Cloud, More than a CDP by Matt Robison
Data Cloud, More than a CDP by Matt Robison
 
GenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdfGenAI Risks & Security Meetup 01052024.pdf
GenAI Risks & Security Meetup 01052024.pdf
 
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
Apidays Singapore 2024 - Building Digital Trust in a Digital Economy by Veron...
 
presentation ICT roal in 21st century education
presentation ICT roal in 21st century educationpresentation ICT roal in 21st century education
presentation ICT roal in 21st century education
 
Exploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone ProcessorsExploring the Future Potential of AI-Enabled Smartphone Processors
Exploring the Future Potential of AI-Enabled Smartphone Processors
 
Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024Tata AIG General Insurance Company - Insurer Innovation Award 2024
Tata AIG General Insurance Company - Insurer Innovation Award 2024
 
Strategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a FresherStrategies for Landing an Oracle DBA Job as a Fresher
Strategies for Landing an Oracle DBA Job as a Fresher
 
Artificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and MythsArtificial Intelligence: Facts and Myths
Artificial Intelligence: Facts and Myths
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
HTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation StrategiesHTML Injection Attacks: Impact and Mitigation Strategies
HTML Injection Attacks: Impact and Mitigation Strategies
 
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemkeProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
ProductAnonymous-April2024-WinProductDiscovery-MelissaKlemke
 
Real Time Object Detection Using Open CV
Real Time Object Detection Using Open CVReal Time Object Detection Using Open CV
Real Time Object Detection Using Open CV
 
AWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of TerraformAWS Community Day CPH - Three problems of Terraform
AWS Community Day CPH - Three problems of Terraform
 
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time AutomationFrom Event to Action: Accelerate Your Decision Making with Real-Time Automation
From Event to Action: Accelerate Your Decision Making with Real-Time Automation
 
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdfUnderstanding Discord NSFW Servers A Guide for Responsible Users.pdf
Understanding Discord NSFW Servers A Guide for Responsible Users.pdf
 
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...
 
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
Bajaj Allianz Life Insurance Company - Insurer Innovation Award 2024
 
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost SavingRepurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving
 
🐬 The future of MySQL is Postgres 🐘
🐬  The future of MySQL is Postgres   🐘🐬  The future of MySQL is Postgres   🐘
🐬 The future of MySQL is Postgres 🐘
 

Web Spam Techniques

  • 1. OWASP – Web Spam Techniques Roberto Suggi Liverani Security Consultant Security-Assessment.com 29 April 2008
  • 2.
  • 3.
  • 4.
  • 5.
  • 6.
  • 7.
  • 8.
  • 9.
  • 10.
  • 11.
  • 12.
  • 13.
  • 14.
  • 15.
  • 16.
  • 17.
  • 18.
  • 19.
  • 20.
  • 21.
  • 22.
  • 23.
  • 24.
  • 25.
  • 26.
  • 27.
  • 28.
  • 29.
  • 30.
  • 31.
  • 32.
  • 33.
  • 34.
  • 35.
  • 36.
  • 37.
  • 38.
  • 39.
  • 40.
  • 41.
  • 42.
  • 43.
  • 44.
  • 45.
  • 46.
  • 47.
  • 48.
  • 49.
  • 50.
  • 51.
  • 52.
  • 53.

Editor's Notes

  1. Each word in the document will be followed by another with a certain frequency http://en.kerouac3001.com/markov-chains-spam-that-search-engines-like-pt-1-5.htm