Bait Email Address Tracking for Fraud Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The proliferation of spam and phishing activities on the internet poses significant challenges due to the anonymity of spammers and phishers, making it difficult to effectively prosecute and combat these illegal and immoral online frauds, as they often use transient and compromised servers, leading to confusion and mistrust among legitimate online entities.

Innovation Solution

The implementation of a system that generates and plants 'bait' email addresses in likely spam or phishing target locations, tracks these addresses, and analyzes received messages to identify fraudulent activities, allowing for the investigation and response to such activities, including the use of correlation engines to categorize messages and initiate technical or administrative responses.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If bait email addresses are planted in likely spam or phishing target locations to identify fraudulent activities, then the ability to detect and respond to fraud is improved, but the system complexity and resources required for tracking and analyzing messages increase

Engineering Contradiction:
Improvefraud detection capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system divides the fraud detection process into distinct functional modules: bait email address generation, message reception, correlation engine analysis, and response initiation. Each module handles a specific aspect of the detection process, making the overall system more manageable and maintainable despite its complexity

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The correlation engine serves as an intermediary component that receives messages from multiple bait email addresses and analyzes them to identify fraudulent patterns. This intermediary layer simplifies the system by centralizing the complex analysis logic in a single component rather than distributing it across multiple systems

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If multiple bait email addresses are generated and tracked to identify spam sources, then the precision of fraud identification is improved, but the loss of time and resources for monitoring and analyzing messages increases

Engineering Contradiction:
Improvefraud identification precisionVSAvoidtime for monitoring messages
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-generating and planting multiple bait email addresses in strategic locations before fraudulent activities occur. This allows the system to proactively capture spam and phishing attempts as they are sent, rather than reactively investigating after damage occurs, thereby improving detection precision without proportionally increasing monitoring time

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The correlation engine analyzes received messages and provides feedback about fraudulent patterns back to the system. This feedback mechanism allows the system to learn from analyzed messages and improve future detection accuracy, reducing the time needed for monitoring as the system becomes more efficient at identifying fraud patterns

Inventive Principle:
Principle #23Feedback

3Loss of information

If bait email addresses are used to attract spam and phishing messages, then the ability to collect evidence for prosecution is improved, but the anonymity of spammers and phishers is enhanced making prosecution more difficult

Engineering Contradiction:
Improveevidence collection capabilityVSAvoidanonymity of fraudsters
Core Design Contradiction:
Loss of informationVSObject-affected harmful factors

Solution Approach 1:

The system converts the harmful anonymity of spammers and phishers into a benefit by using bait email addresses that are specifically designed to attract fraudulent messages. The anonymity that allows spammers to operate freely also ensures they will send messages to any available address, including the bait addresses, thereby guaranteeing evidence collection without requiring the system to compromise fraudster anonymity

Inventive Principle:
Principle #22Blessing in disguise (Convert harm into benefit)

Data Source

PatentUS8041769B2Generating phish messages
Publication Date: 2011.10.18 OPSEC ONLINE LTD
  • US8041769B2 patent drawing
  • US8041769B2 patent drawing
  • US8041769B2 patent drawing

AI summary

Various embodiments of the invention provide solutions (including inter alia, systems, methods and software) for dealing with online fraud. In particular, various embodiments of the invention provide ways to incite unsolicited email messages (such as spam messages, phish messages, etc.). In accordance with some embodiments, a bait email address may be planted in a particular location on the Internet. In particular embodiments, the location of the planted email address may be tracked in order to determine which locations are relatively more likely to generate unsolicited email messages. In other embodiments, domains likely to host the bait email addresses receiving unsolicited messages may be obtained. In some cases, unsolicited messages may be analyzed and/or otherwise processed to determine whether the messages are possibly associated with a fraudulent activity. Such analysis may lead to the investigation of one or more web sites and/or to the initiation of a response against a fraudulent activity.