25
PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed , Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs National University of Computer and Emerging Sciences (NUCES) Pakistan FAST-NUCES

PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Embed Size (px)

Citation preview

Page 1: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

FAST-NUCES

PiMail: Affordable, Lightweight and Energy-Efficient Private Email Infrastructure

Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan

IT Security Labs

National University of Computer and Emerging Sciences (NUCES)

Pakistan

Page 2: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Introduction

Electronic mail is one of the biggest technologies being used over the internet today.

Third party mail service is easier to use(-) Sacrifice of Control and Flexibility.

Privacy is major riskUnauthorized AccessInspection during storage or broader gov. surveillance programs of

emails is of a major concern to a majority of the users.

FAST-NUCES

Page 3: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Can Private Mail Servers Help ?

Private mail server allows full control over both the server and the emails.

Furthermore it gives complete access to mail server’s logs, and access to raw email files in a user’s mail directory.

One of the greatest benefit is the possibility to troubleshoot and fix things on your own, instead of requesting a third-party mail service provider.

However, Running a private email server for individuals or small scale enterprises can cost from $7 to $15 monthly or more, depending on the configurations

FAST-NUCES

Page 4: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Affordable and lightweight mailing server for Individuals and SMEs running on Raspberry Pi.

A low cost infrastructure that would cost a one time investment of $35 to purchase Raspberry Pi 2.

Low electricity consumption with an email server that can run 24/7/365 for under $5 of electricity per year.

FAST-NUCES

PiMail

Page 5: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Personalized email address like [email protected] with an annual recurring cost of domain registration with a registrar like namecheap.com.

The ability to connect from anywhere, and read & send email, using a secure IMAP connection on your phone, tablet or computer.

Complete control over your personal communication.Emails are stored over PiMail server, and nobody scan them to

sell adverts. Smart spam filtering with SpamAssassin. Efficient virus scanning with ClamAV.

FAST-NUCES

PiMail

Page 6: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

The Raspberry Pi Computer

Raspberry Pi is low-cost, low-power and highly portable single board computer.

Raspberry Pi is one of the smallest, credit-card sized, single board computer available in the market.

It has the highest performance to cost ratio.Raspberry Pi makes it possible to create an affordable, energy-

efficient and portable miniature private mail server according to the need of individual users or small enterprise..

FAST-NUCES

Page 7: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Raspberry Pi 2 - Hardware

FAST-NUCES

Page 8: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Raspberry Pi 2 – System Software

FAST-NUCES

The recommended OS for Raspberry Pi 2 is Raspbian, which is a port of the well-known Linux distribution, Debian.

Raspbian is optimized for the ARMv6 and ARMv7 instruction set with hardware floating point support.

It is optimized with around 35,000 pre-built packages, for easy installation on Raspberry Pi.

With the introduction of ARMv7 core, Raspberry Pi 2 can also run Ubuntu and Pi 2 compatible version of Windows 10

Page 9: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

PiMail System DesignPiMail runs Raspbian OS (a distribution of Debian optimized for the

Raspberry Pi hardware)Server runs on top of Raspbian OS (from 16 GB micro SD card) It is a combination of Postfix, SpamAssassin, ClamAV and Dovecot

FAST-NUCES

Page 10: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

PiMail Components

FAST-NUCES

PostfixA fast, easy to administer and secure Mail Transfer Agent (MTA)

developed by Wietse Venema in 1997 as an alternative to SendMail.

SpamAssassinOne of the most widely used content-based filterThe defense mechanisms include header tests, body phase tests,

Bayesian filtering, automatic address whitelist/blacklist, automatic sender reputation system, manual address whitelist/blacklist, collaborative spam identification database, DNS blacklist and character sets.

Page 11: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

PiMail Components (2)

FAST-NUCES

ClamAVOpen source antivirus toolkit designed for the scanning of emails at

the mail gateways.Analyse the mail from the inbound queue using shared libraries of

the anti-virus engine.

DovecotDovecot is a secure IMAP server that provide IMAP functionality

to fetch the mail from the mail directory. It is also used to provide simple authentication and security layer

(SASL) to validate the identity of a user before he can send or receive an email.

Page 12: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

PiMail Testbed

Augmented Raspberry Pi 2 with Postfix MTA, SpamAssassin content filter, ClamAV antivirus and Dovecot IMAP server, and deployed it over the LAN.

For all the experiments, we used a desktop machine connected via LAN to send mails with different size and frequencies to PiMail server.

FAST-NUCES

Page 13: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Evaluation Scenarios

We conducted experiments in four different scenarios as follows:S1: In scenario 1 (S1), the SMTP server runs postfix without any spam

filter.S2: In scenario 2 (S2) ClamAV is used as an anti-virus with Postfix.S3: In scenario 3 (S3) SpamAssassin is used as a content-based filter

with Postfix.S4: In scenario 4 (S4) SpamAssassin is used as a content-based filter

and ClamAV is used as an anti-virus with Postfix.

FAST-NUCES

Page 14: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Evaluation Metrics

We run different experiments using the above scenarios to study the impact of:Processing DelaysEnd-to-End ThroughputMessage SizeCPU and Memory Utilizations.

FAST-NUCES

Page 15: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Processing Delay

Settings:Two modes

Burst (50 messages to saturate the mail server)1 second delay b/w two messages (50 messages)

8 KB message size, being the average size of email message [12].

FAST-NUCES

Page 16: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Throughput

Settings (same as before):Two modes

Burst (50 messages to saturate the mail server)1 second delay b/w two messages (50 messages)

8 KB message size, being the average size of email message [12].

FAST-NUCES

Page 17: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Message Size

Objectives:Measure how message size effects the processing time and end-to-

end throughput.

Settings:Two message size i.e. 8KB and 64 KBTwo modes

Burst (50 messages to saturate the mail server)1 second delay b/w two messages (50 messages)

FAST-NUCES

Page 18: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Message Size Effect on Processing Time

FAST-NUCES

Burst Mode 1 sec Delay

Page 19: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Message Size Effect on Throughput

FAST-NUCES

Burst Mode 1 sec Delay

Page 20: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

CPU and Memory Utilization

Objectives:Evaluate CPU and Memory Utilization of PiMail in all four

scenarios.

Settings:Sent email message of 8 KB every 0.6 seconds.Total evaluation time 480 seconds.This experiment setting is based on email statistics from a big

University discussed in [12]

FAST-NUCES

Page 21: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

CPU Utilization

FAST-NUCES

Total CPU (%) Avg. CPU (%)

Page 22: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Memory Utilization

FAST-NUCES

Total Memory (%) Avg. Memory (%)

Page 23: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Processing Delay with Low Email Volume

Objectives:Effect of low volume email (without burst) .

Settings:50 emails of 8 KB eachInterval of 60 seconds between two messages

FAST-NUCES

Page 24: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Conclusion

We propose PiMail, an affordable, lightweight and energy-efficient private email infrastructure based on Raspberry Pi 2.

First extensive study that benchmarks the performance of Raspberry Pi used as a portable and private mail server.

Based on the results, we observed:Content-based spam filtering with SpamAssassin is the most

resource hungry process. With high volume of emails, PiMail experienced performance

bottleneck with SpamAssassinWith an interval of 20-30 second, even the most decorated

configuration of PiMail (S4) will not exhaust the resources and there will not be any backlogs.

PiMail is capable handling a volume of 4000 emails with frequency 3 emails per minute, which is more than enough for individuals and SMEs.

FAST-NUCES

Page 25: PiMail: Affordable, Lightweight and Energy- Efficient Private Email Infrastructure Sufian Hameed, Muhammad Arsal Asif, Farhan Kamal Khan IT Security Labs

Bibliography

[1] Clamav: Opensource antivirus engine for mail gateway. http://www.clamav.net/.

[2] Cost of private mail server. http://jeffreifman.com/how-to-install-yourown-private-e-mail-server-in-the-amazon-cloud-aws/.

[3] Dovecot: secure imap server. http://www.dovecot.org/.

[4] Postfix mail transfer agent. http://www.postfix.org/.

[5] Prism surveillance program. https://en.wikipedia.org/wiki/PRISMsurveillance-program/.

[6] Raspberry pi. https://www.raspberrypi.org/.

[7] Raspberry pi 2 model b. https://www.raspberrypi.org/products/raspberrypi-2-model-b/.

[8] Raspbian os. http://www.raspbian.org/.

[9] Spamassassin. http://spamassassin.apache.org/.

[10] Windows 10 for raspberry pi. http://www.WindowsOnDevices.com.

[11] T.R.P Foundation. About us. https://www.raspberrypi.org/about/.

[12] Sufian Hameed, Xiaoming Fu, Nishanth Sastry, and Pan Hui. Fighting spam using social gatekeepers. Networking Science, 2(1-2):28–41, 2013.

[13] J. Klensin. Simple mail transfer protocol. the internet society, rfc 5321. The Internet Society, RFC 5321, 2008.

FAST-NUCES