Junk mail detection method and device thereof

A spam and detection method technology, applied in the network field, can solve problems such as the inability to process mail, achieve the effect of maintaining normal use and ensuring network security

Active Publication Date: 2009-09-23
HUAWEI TECH CO LTD
View PDF0 Cites 37 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0004] In the process of realizing the present invention, the inventor found that the defects in the prior art are: the black and white list technology can only filter the emails of users already on the blacklist, and the emails from unknown users cannot be processed by the black and white list technology
In addition, it is impossible to include all (even a lar...

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Junk mail detection method and device thereof
  • Junk mail detection method and device thereof
  • Junk mail detection method and device thereof

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0025] Embodiments of the present invention provide a spam detection method for users who send spam, such as figure 1 As shown, the method includes: obtaining the behavior index statistical information of the email sent by the user corresponding to the preset behavior index (see step 101); determining whether the index statistical information corresponding to each behavior index exceeds the index threshold corresponding to the behavior index, and The weight corresponding to the behavior index exceeding the index threshold is counted (see step 102); if the statistical result exceeds the preset weight threshold, it is determined that the user's behavior of sending emails is abnormal (see step 103).

[0026] In this embodiment, the behavior index is used to measure the network traffic characteristics of sending emails, and one or more can be set according to the actual situation, and each behavior index corresponds to an index threshold and weight.

[0027] In this embodiment, th...

Embodiment 2

[0032] The embodiment of the present invention also provides a spam detection method. The behavior index is used to measure the characteristics of sending mail. Referring to the accompanying drawings, the default behavior index is the number of mail sessions, the number of destination servers, and the number of attempted mails. , the total number of recipient addresses, the length of time for sending emails, and the sending rate of emails are examples for detailed description.

[0033] Such as figure 2 As shown, the method includes:

[0034] Step 201, extract the SMTP flow of each user from the flow of the monitored network, that is, the mail data packets transmitted by each user in the network. The following uses the detection of one of the user's email sending behaviors as an example for illustration.

[0035] In step 202, statistics are made on the behavioral characteristics of the user sending emails according to the preset behavioral indicators, so as to obtain corresp...

Embodiment 3

[0076] An embodiment of the present invention provides a spam detection device, such as image 3 As shown, the device includes an information acquisition unit 301 , a weight statistics unit 302 and a behavior determination unit 303 .

[0077] Wherein, the information acquiring unit 301 is configured to acquire statistical information of behavioral indicators of emails sent by users corresponding to preset behavioral indicators, and the behavioral indicators are used to measure the characteristics of sending emails;

[0078] The weight statistics unit 302 is used to respectively determine whether the index statistical information corresponding to each behavior index exceeds the index threshold corresponding to the behavior index, and count the weight corresponding to the behavior index exceeding the index threshold;

[0079] The behavior determination unit 303 is configured to determine that the user's behavior of sending emails is abnormal when the statistical result of the we...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The embodiment of the invention provides a junk mail detection method and a device thereof. The method comprises the steps of: obtaining behavioral indicator statistic information of users in sending mails, which corresponds to a predetermined behavioral indicator used for measuring the characteristics of sent mails; respectively determining whether the corresponding behavioral indicator statistic information of each behavioral indicator exceeds the corresponding indicator threshold valve of the behavioral indicator and conducting statistics on the corresponding weight of the behavioral indicator exceeding the indicator threshold valve; and determining the behaviors that the users send mails are abnormal if the statistic result exceeds a predetermined weight threshold value. By the embodiment of the invention, the sources of mails can be identified effectively, thus treating the mails with unknown sources effectively, maintaining network for normal use and guaranteeing network safety.

Description

technical field [0001] The invention relates to the field of network technology, in particular to a spam detection method and device thereof. Background technique [0002] With the rapid development of Internet technology, email is becoming a fast and economical means of modern communication technology. However, while e-mail provides convenience for people, it also provides an important carrier for the spread of spam, viruses, malicious programs or sensitive content information, which poses a serious threat to system security. [0003] Currently, source-based filtering is used to filter spam, that is, black and white list technology. The black list lists the IP addresses of mail servers that are believed to send spam, while the white list is just the opposite. [0004] In the process of realizing the present invention, the inventor found that the defect in the prior art is that the black-and-white list technology can only filter the emails of users already on the blacklist,...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): H04L29/06H04L12/24H04L12/58
Inventor 刘强徐业健黄敏于锋
Owner HUAWEI TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap