2007
Workload models of spam and legitimate e-mails.
Perform. Evaluation, 2007

2004
Characterizing a spam traffic.
Proceedings of the 4th ACM SIGCOMM Internet Measurement Conference, 2004