Security Issues in SMTP-based Email Systems

Bo Holst-Christensen; Erik Frøkjær

doi:10.1109/CMI53512.2021.9663741

Security Issues in SMTP-based Email Systems

Bo Holst-Christensen^*, Erik Frøkjær^*

^*Corresponding author for this work

Department of Engineering Technology and Didactics

University of Copenhagen

Research output: Chapter in Book/Report/Conference proceeding › Article in proceedings › Research › peer-review

Abstract

The SMTP standard was originally published in 1982 and has since then become one of the mostly used methods for data communication. Since its publication the standard has been modified with many extensions intended to handle security issues. A selection of the most common security issues that surfaces when these extensions are used in practice is identified and discussed in relation to confidentiality, integrity, availability, and authentication. The complexity of the current situation makes it clear why organizations, mail service providers, and users have great difficulty in securely managing their email systems. Most email systems are vulnerable and cause serious security risks for individuals, organizations, and societies. The risks have grown to be critical for the digitization of our societies

Original language	English
Title of host publication	Proceedings of 2021 14th CMI International Conference - Critical ICT Infrastructures and Platforms (CMI)
Number of pages	6
Publisher	IEEE
Publication date	2022
ISBN (Electronic)	978-1-6654-1645-0
DOIs	https://doi.org/10.1109/CMI53512.2021.9663741
Publication status	Published - 2022
Event	14th CMI International Conference: Critical ICT Infrastructures and Platform - Online, Denmark Duration: 25 Nov 2021 → 26 Nov 2021 Conference number: 53512x https://www.conf.cmi.aau.dk/CMI+conference+2021/

Conference

Conference	14th CMI International Conference
Number	53512x
Location	Online
Country/Territory	Denmark
Period	25/11/2021 → 26/11/2021
Internet address	https://www.conf.cmi.aau.dk/CMI+conference+2021/

Keywords

Email
SMTP
Security
Hacker attacks
Communication
Confidentiality
Integrity
Availability
Authentication
Usability

Access to Document

10.1109/CMI53512.2021.9663741

OpenUrl availability

Full text

Cite this

@inproceedings{05cb4446937e458f9444f319d386e752,

title = "Security Issues in SMTP-based Email Systems",

abstract = "The SMTP standard was originally published in 1982 and has since then become one of the mostly used methods for data communication. Since its publication the standard has been modified with many extensions intended to handle security issues. A selection of the most common security issues that surfaces when these extensions are used in practice is identified and discussed in relation to confidentiality, integrity, availability, and authentication. The complexity of the current situation makes it clear why organizations, mail service providers, and users have great difficulty in securely managing their email systems. Most email systems are vulnerable and cause serious security risks for individuals, organizations, and societies. The risks have grown to be critical for the digitization of our societies",

keywords = "Email, SMTP, Security, Hacker attacks, Communication, Confidentiality, Integrity, Availability, Authentication, Usability",

author = "Bo Holst-Christensen and Erik Fr{\o}kj{\ae}r",

year = "2022",

doi = "10.1109/CMI53512.2021.9663741",

language = "English",

booktitle = "Proceedings of 2021 14th CMI International Conference - Critical ICT Infrastructures and Platforms (CMI)",

publisher = "IEEE",

address = "United States",

note = "14th CMI International Conference : Critical ICT Infrastructures and Platform, CMI 2021 ; Conference date: 25-11-2021 Through 26-11-2021",

url = "https://www.conf.cmi.aau.dk/CMI+conference+2021/",

}

TY - GEN

T1 - Security Issues in SMTP-based Email Systems

AU - Holst-Christensen, Bo

AU - Frøkjær, Erik

N1 - Conference code: 53512x

PY - 2022

Y1 - 2022

N2 - The SMTP standard was originally published in 1982 and has since then become one of the mostly used methods for data communication. Since its publication the standard has been modified with many extensions intended to handle security issues. A selection of the most common security issues that surfaces when these extensions are used in practice is identified and discussed in relation to confidentiality, integrity, availability, and authentication. The complexity of the current situation makes it clear why organizations, mail service providers, and users have great difficulty in securely managing their email systems. Most email systems are vulnerable and cause serious security risks for individuals, organizations, and societies. The risks have grown to be critical for the digitization of our societies

AB - The SMTP standard was originally published in 1982 and has since then become one of the mostly used methods for data communication. Since its publication the standard has been modified with many extensions intended to handle security issues. A selection of the most common security issues that surfaces when these extensions are used in practice is identified and discussed in relation to confidentiality, integrity, availability, and authentication. The complexity of the current situation makes it clear why organizations, mail service providers, and users have great difficulty in securely managing their email systems. Most email systems are vulnerable and cause serious security risks for individuals, organizations, and societies. The risks have grown to be critical for the digitization of our societies

KW - Email

KW - SMTP

KW - Security

KW - Hacker attacks

KW - Communication

KW - Confidentiality

KW - Integrity

KW - Availability

KW - Authentication

KW - Usability

U2 - 10.1109/CMI53512.2021.9663741

DO - 10.1109/CMI53512.2021.9663741

M3 - Article in proceedings

BT - Proceedings of 2021 14th CMI International Conference - Critical ICT Infrastructures and Platforms (CMI)

PB - IEEE

T2 - 14th CMI International Conference

Y2 - 25 November 2021 through 26 November 2021

ER -

Security Issues in SMTP-based Email Systems

Abstract

Conference

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this