A sensitive mail filtering system and method based on client/server mode

Abstract

The invention discloses a sensitive email filtering system and method based on a client / server mode and particularly relates to a method for filtering out sensitive emails in real time without an email proxy server or an email gateway. The method can be used for detecting, analyzing and intercepting titles, text, attachment names and attachment content of sent emails in real time.

Description

technical field [0001] The invention relates to a sensitive mail filtering system and method based on client / server mode. Background technique [0002] Email (mail for short) has become the most basic communication tool on the Internet. While bringing convenience to people, it also brings many security problems, among which the sensitive leakage of emails is one of the very important problems. It is mainly reflected in the following aspects: First, email itself is a leaking channel, and internal malicious users can actively use the email system to send sensitive information to the external network, causing leaks. Second, the storage range of emails is difficult to control. Sending and receiving emails are stored on the email server, and users have no control over the server; if the server is compromised, sensitive data is easily leaked. The third is that emails are easy to be intercepted during transmission, and emails are transmitted in clear text by default in the networ...

AI Technical Summary

Problems solved by technology

It is mainly reflected in the following aspects: First, the email itself is a channel for leaking secrets. Internal malicious users can actively use the email system to send sensitive information to the external network, causing leaks

Second, the storage range of emails is difficult to control. Sending and receiving emails are stored on the email server, and users have no control over the server; if the server is compromised, sensitive data is easily leaked

The third is that emails are easy to be intercepted during transmission, and emails are transmitted in clear text by default in the network, so user data is easily stolen by malicious users because of "monitoring"; even if secure socket layer (SSL) is used to encrypt E-mail Transmission can only ensure that the data transmission between the user and the mail server cannot be monitored, and the data transmission between the mail servers still uses plaintext data

However, this method can only filter attributes such as attachment type, subject, body, domain name, number of recipients, and sender / recipient, and cannot detect and filter attachment content. The mail proxy servers in this method are connected in series On the network link, the risk of single point failure will be introduced, and at the same time, this method cannot realize the alarm prompt for the client sending sensitive information

[0004] In short, the currently disclosed methods cannot solve the problem of real-time interception of emails containing sensitive information

Images