CN1909520A - Rubbish mail filtration system and method based on email server - Google Patents

Rubbish mail filtration system and method based on email server Download PDF

Info

Publication number
CN1909520A
CN1909520A CNA2006100369488A CN200610036948A CN1909520A CN 1909520 A CN1909520 A CN 1909520A CN A2006100369488 A CNA2006100369488 A CN A2006100369488A CN 200610036948 A CN200610036948 A CN 200610036948A CN 1909520 A CN1909520 A CN 1909520A
Authority
CN
China
Prior art keywords
spam
module
mail
sample
management module
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CNA2006100369488A
Other languages
Chinese (zh)
Other versions
CN100499599C (en
Inventor
隆承志
张凌
董守斌
许勇
陈启愉
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Count Network Co Ltd Of Park In Guangzhou
South China University of Technology SCUT
Original Assignee
Count Network Co Ltd Of Park In Guangzhou
South China University of Technology SCUT
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Count Network Co Ltd Of Park In Guangzhou, South China University of Technology SCUT filed Critical Count Network Co Ltd Of Park In Guangzhou
Priority to CNB2006100369488A priority Critical patent/CN100499599C/en
Publication of CN1909520A publication Critical patent/CN1909520A/en
Application granted granted Critical
Publication of CN100499599C publication Critical patent/CN100499599C/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Information Transfer Between Computers (AREA)

Abstract

The invention relates to a waste email filter system based on email server, which comprises: several email filters and connected email server, and email client; said filters are connected to the central manager; said manager and filters both comprise sample manage module, character manage module, to connect the sample manage module and character manage module of relative email filters via internet. The invention can realize synchronous share of waste character, to improve the real-time property of waste prevention.

Description

Spam filtering system and method based on mail server
Technical field
The present invention relates to the Internet Spam filtering technology, specifically be meant Spam filtering system and method based on mail server.
Background technology
Along with the INTERNET Internet the popularizing of the whole world, network application has entered people's life, and is bringing into play increasing effect.Developing rapidly when bringing favourable one side of internet to us, also provide new crime technological means and space for various lawless persons, some lawless persons utilize the Internet to carry out various illegal activities, harmful informations such as online various reaction, salaciousness, pornographic, supertition, violence are propagated in a large number, local and overseas hostile forces utilize also that the Internet permeates, instigates, the destructive activity situation is serious, threatened the national security and social stability the sound development of harm building a socialist society that is culturally and ideologically advanced and the Internet.Spam such as contents such as reaction, pornographic, commerce, has become big public hazards of the Internet.Spam has been a malignant tumor of China Internet.Spam has become the object of China in the regulation of internet arena emphasis.
Filtering technique is the major technique that anti-rubbish mail is used.At present the Spam filtering system mainly adopts based on the filter type of user rs host with based on the filter type of mail server.
(1) based on the filter type of user rs host, to be Mail Clients receive mail from receipt mail server filters before local machine, the filtering function as the filtrating mail client of Outlook 2003, the Symantec of Microsoft all provides.But this mode needs client's self autonomous participation, is user's personal behavior fully, needs self-defined a lot of filtering rules, and is higher to client's competency profiling.So this method has only very a spot of user using.If filtering function is not used in configuration, a large amount of spams can enter PC.Even filtering function has been used in configuration,, be difficult to filter most of spam because the filtration means are single, filtering rule is simple.
(2) based on the filter type of mail server, be that twit filter was installed before mail server, all mails that send to mail server must carry out filtration treatment by mail filter.This filter type does not need participating in directly of terminal use; filtering rule is by the unified customization of mail service provider; and mail server is before owing to be the unified inlet of mail; the easier spam feature of from a large amount of mails, gathering; eliminate most spam in " source "; this mode can effectively be protected the safety of mail server simultaneously; so this mode obtains the approval of vast mail service provider, filter was all installed by strong mail service provider before mail server.
Adopt traditional filter type based on mail server, spam filters during its networking before each mail server is (as spam filters 1, spam filters 2 ... spam filters n) just work separately, not having has any related with other spam filters.The subject matter that this filter type exists has:
(1) real-time of Guo Lving is poor.The rubbish outburst exists region, time difference property and industrial nature, and the spam of user's discovery spreads to probably with other regional, of the same trade users.Can not realize that in this manner characteristics of spam is shared, identical rubbish probably can mail to other mail server.And each user will filter these rubbish separately a learning process that relatively lags behind is arranged, and it is especially necessary to user's influence how to eliminate these rubbish in the very first time.Spam feature of the same trade simultaneously has very big similitude, and the characteristics of spam of finding on one point by the feature shared model in time shares to other filters, reduces the learning time of other filters, can promote the real-time of filtration like this.
(2) effect of Guo Lving is difficult to promote.The quality of rubbish filtering effect is subjected to the influence of several factors, as what, the position of mail server in network environment, the parameter configuration of mail server, the industrial nature under the user, user's Business Nature etc. of user mail amount.Single filter mail amount is less relatively, does not much have statistical law, if depend on the learning ability of single mail filter, is difficult to a large amount of characteristics of spam of study, and more spam can not be filtered device and filter.
Summary of the invention
The objective of the invention is to overcome the shortcoming and defect of above-mentioned prior art, a kind of Spam filtering system based on mail server is provided, it can realize that characteristics of spam the whole network is shared synchronously, effectively promotes the real-time that rubbish is taken precautions against, and improves the filter effect of spam.
The present invention also aims to provide rubbish mail filtering method based on the Spam filtering system of mail server.
Purpose of the present invention is achieved through the following technical solutions: this is based on the Spam filtering system of mail server, comprise that a plurality of mail filters reach the mail server that connects successively thereafter, Mail Clients, a plurality of described mail filters also are connected with central manager simultaneously by the Internet, described central manager, mail filter all comprises the sample management module respectively, Features Management module, and the sample management module of described central manager, the Features Management module is by the corresponding sample management module with mail filter in the Internet, the Features Management module connects respectively.
For realizing the present invention better, described central manager sample management module comprises sample collection module, sample auditing module, sample storage module and the central spam samples library module that connects successively; Described central manager Features Management module comprises that collection apparatus module, feature merge module, characteristic extracting module, feature distribution module and central characteristics of spam library module, described feature merges module and is connected with collection apparatus module, characteristic extracting module, central characteristics of spam library module respectively, the feature distribution module is connected with central characteristics of spam library module, and characteristic extracting module is connected with central spam samples library module;
Described mail filter sample management module comprises sample download module, sample auditing module, sample reporting module, sample process module and spam samples library module, the sample download module is connected with the sample auditing module, sample auditing module, sample reporting module, sample process module are connected with the spam samples library module respectively, and the sample reporting module also is connected by the sample collection module of the Internet with described central manager Features Management module; Described mail filter Features Management module comprises that the feature download module, the feature that connect successively merge module, characteristics of spam library module, feature reporting module, its feature merges module and is connected with the sample process module, and feature download module, feature reporting module also are connected respectively by feature distribution module, the collection apparatus module of the Internet corresponding and described central manager Features Management module.
This is based on the rubbish mail filtering method of the Spam filtering system of mail server, be meant and in mail filter, set up spam samples storehouse and characteristics of spam storehouse that spam samples and characteristics of spam can be uploaded, be shared in the spam samples storehouse of each mail filter and characteristics of spam storehouse by the Internet; Central manager is extracted characteristics of spam and classification by gathering and handle spam samples and the characteristics of spam that each mail filter or Mail Clients are submitted to, sets up central spam samples storehouse, central characteristics of spam storehouse; Each mail filter regularly or by manual is downloaded characteristics of spam to upgrade the characteristics of spam storehouse of mail filter from central manager, realize that characteristics of spam is shared synchronously, and carry out the filtration of spam according to its characteristics of spam storehouse, and processing must be regularly forgotten in the characteristics of spam storehouse of described central manager, mail filter.
The foundation in the spam samples storehouse of described mail filter, be meant that mail filter passes through the sample download module of its sample management module, gather on the Internet or spam sample that Mail Clients initiatively reports, and the sample auditing module that is sent to its sample management module is examined screening, avoid the user to submit to the malice mail (as virus email, super large mail etc.) system handles is impacted, examine in the spam samples library module that later spam samples directly enters its sample management module, and the storage of classifying, thereby set up the spam samples storehouse of mail filter.
The foundation in the characteristics of spam storehouse of described mail filter, be meant that mail filter passes through the sample process module of its sample management module, from the spam samples library module of its sample management module, extract spam samples and analyze and extract characteristics of spam, mail filter is by the feature download module of its Features Management module simultaneously, download characteristics of spam from the feature distribution module of central manager feature administration module, mail filter merges characteristics of spam by the feature merging module of its Features Management module, after removing repeated characteristic, characteristics of spam classification is stored in the characteristics of spam library module of its Features Management module, thereby sets up the characteristics of spam storehouse of mail filter.
The foundation in the spam samples storehouse of described central manager, be meant that central manager passes through the sample collection module of its sample management module, gather the sample reporting module of each mail filter sample management module or the spam samples that Mail Clients initiatively reports, and the sample auditing module that is sent to central manager sample management module is examined screening, avoid the user to submit to the malice mail (as virus email, super large mail etc.) system handles is impacted, examine later spam samples through the sample storage module of the central manager sample management module buffer memory of classifying, and send in the central spam samples library module of its sample management module, thereby set up the spam samples storehouse of central manager.
The foundation in the characteristics of spam storehouse of described central manager, be meant that central manager passes through the characteristic extracting module of its sample management module, from the central spam samples library module of its sample management module, extract new characteristics of spam by the characteristics of spam classification, central manager is by the collection apparatus module of its Features Management module simultaneously, the characteristics of spam that the feature reporting module of collection mail filter Features Management module initiatively reports, central manager merges characteristics of spam by the feature merging module of its Features Management module, remove repeated characteristic, and to after carrying out Ageing Treatment above the characteristics of spam of setting the time limit, characteristics of spam classification is stored in the characteristics of spam library module of its Features Management module, thereby sets up the characteristics of spam storehouse of central manager.
The classification of described spam samples comprises mail, the mail that meets the address blacklist, the mail that meets fingerprint characteristic that meets the IP blacklist, the mail that meets keyword; The classification of described characteristics of spam comprises feature, IP blacklist feature, address blacklist feature, fingerprint characteristic, key characteristics in full.
Described characteristics of spam storehouse forget processing, be meant characteristics of spam storehouse each characteristics of spam logging timestamp, and remove each characteristics of spam that reaches the setting-up time time limit depositing in; According to operating experience, the described setting-up time time limit generally can be set at 3 months.No matter central manager still is each mail filter, increase along with running time, characteristics of spam can get more and more, these characteristics of spam come from the continuous study accumulation of mail filter self on the one hand, share the characteristics of spam that obtains by central manager from other mail filtering systems on the other hand.Because the junk senders method in the continuous conversion of rubbish sender, as revise Mail Contents, conversion and send the address, characteristics of spam originally As time goes on, the part characteristics of spam again can not be filtered the spam after the variation, these features have just lost due effect, can increase the capacity in characteristics of spam storehouse on the contrary, distribution causes the increase on the bandwidth to feature, so must forget processing to the characteristics of spam storehouse.
Described each mail filter is set according to the operating load situation of network communication state between central manager, the mail filter and central manager from the timing of central manager download characteristics of spam, and timing can be one day.
The time limit of described Ageing Treatment is set by the keeper, generally can be set at 90 days.
Described feature distribution comprises increment distribution and full dose distribution, and the full dose distribution is meant that all characteristics of spam with central characteristics of spam storehouse are distributed to each mail filter; Increment distribution is meant that central characteristics of spam storehouse downloads the characteristics of spam that historical record is determined the needs distribution according to the characteristics of spam of mail filter, avoid repeating distribution, network bandwidth when this can reduce the feature distribution takies, and reduces the time delay that mail filter obtains new characteristics of spam.
The present invention compared with prior art, have following advantage and beneficial effect: adopt a plurality of mail filters the characteristics of spam of spam to be carried out the strange land shared processing by unified central manager, form the whole network protected network, accomplish that point discovery rubbish the whole network interlock blocks, can effectively promote the filter effect of spam; On the other hand, bridge and maincenter that central manager is shared as characteristics of spam organically connect each filtration system, realize sharing of characteristics of spam and spam samples, also effectively promote the ability of filter effect and quick response disposal of refuse mail.
Description of drawings
Fig. 1 is the structural representation that the present invention is based on the Spam filtering system of mail server;
Fig. 2 is the internal structure schematic diagram of central manager shown in Figure 1;
Fig. 3 is the internal structure schematic diagram of mail filter shown in Figure 1.
Embodiment
Below in conjunction with embodiment and accompanying drawing, the present invention is described in further detail, but embodiments of the present invention are not limited thereto.
Embodiment one
As shown in Figure 1, this is based on the Spam filtering system of mail server, comprise that n mail filter reaches mail server, the Mail Clients that connects successively thereafter, n mail filter also is connected with central manager simultaneously by the Internet, central manager, mail filter all comprise sample management module, Features Management module respectively, and the sample management module of central manager, the Features Management module is corresponding by the Internet is connected respectively with the sample management module of mail filter, Features Management module.
As shown in Figure 2, central manager sample management module comprises sample collection module, sample auditing module, sample storage module and the central spam samples library module that connects successively; Central manager Features Management module comprises that collection apparatus module, feature merge module, characteristic extracting module, feature distribution module and central characteristics of spam library module, feature merges module and is connected with collection apparatus module, characteristic extracting module, central characteristics of spam library module respectively, the feature distribution module is connected with central characteristics of spam library module, and characteristic extracting module is connected with central spam samples library module;
As shown in Figure 3, mail filter sample management module comprises sample download module, sample auditing module, sample reporting module, sample process module and spam samples library module, the sample download module is connected with the sample auditing module, sample auditing module, sample reporting module, sample process module are connected with the spam samples library module respectively, and the sample reporting module also is connected by the sample collection module of the Internet with central manager Features Management module; Mail filter Features Management module comprises that the feature download module, the feature that connect successively merge module, characteristics of spam library module, feature reporting module, its feature merges module and is connected with the sample process module, and feature download module, feature reporting module are also corresponding by the Internet to be connected respectively with feature distribution module, the collection apparatus module of central manager Features Management module.
Shown in Fig. 2,3, this is based on the Spam filtering system of mail server, its course of work of filtering spam is: set up spam samples storehouse and characteristics of spam storehouse in mail filter, spam samples and characteristics of spam can be uploaded, be shared in the spam samples storehouse of each mail filter and characteristics of spam storehouse by the Internet; Central manager is extracted characteristics of spam and classification by gathering and handle spam samples and the characteristics of spam that each mail filter or Mail Clients are submitted to, sets up central spam samples storehouse, central characteristics of spam storehouse; Each mail filter regularly or by manual is downloaded characteristics of spam to upgrade the characteristics of spam storehouse of mail filter from central manager, realize that characteristics of spam is shared synchronously, and carry out the filtration of spam according to its characteristics of spam storehouse, and processing must be regularly forgotten in the characteristics of spam storehouse of described central manager, mail filter.
Wherein, the foundation in the spam samples storehouse of mail filter, be meant that mail filter passes through the sample download module of its sample management module, gather on the Internet or spam sample that Mail Clients initiatively reports, and the sample auditing module that is sent to its sample management module is examined screening, avoid the user to submit to the malice mail (as virus email, super large mail etc.) system handles is impacted, examine in the spam samples library module that later spam samples directly enters its sample management module, and according to the mail that meets the IP blacklist, the mail that meets the address blacklist, the mail that meets fingerprint characteristic, the classifications such as mail that the meet keyword storage of classifying, thus the spam samples storehouse of mail filter set up.
The foundation in the characteristics of spam storehouse of mail filter, be meant that mail filter passes through the sample process module of its sample management module, from the spam samples library module of its sample management module, extract spam samples and analyze and extract characteristics of spam, mail filter is by the feature download module of its Features Management module simultaneously, download characteristics of spam from the feature distribution module of central manager feature administration module, mail filter merges characteristics of spam by the feature merging module of its Features Management module, after removing repeated characteristic, according to the full text feature, IP blacklist feature, address blacklist feature, fingerprint characteristic, classifications such as key characteristics are stored in the characteristics of spam classification in the characteristics of spam library module of its Features Management module, thereby set up the characteristics of spam storehouse of mail filter.
The foundation in the spam samples storehouse of central manager, be meant that central manager passes through the sample collection module of its sample management module, gather the sample reporting module of each mail filter sample management module or the spam samples that Mail Clients initiatively reports, and the sample auditing module that is sent to central manager sample management module is examined screening, avoid the user to submit to the malice mail (as virus email, super large mail etc.) system handles is impacted, examine later spam samples through the sample storage module of central manager sample management module according to the mail that meets the IP blacklist, the mail that meets the address blacklist, the mail that meets fingerprint characteristic, the classifications such as mail that the meet keyword buffer memory of classifying, and send in the central spam samples library module of its sample management module, thereby set up the spam samples storehouse of central manager.
The foundation in the characteristics of spam storehouse of central manager, be meant that central manager passes through the characteristic extracting module of its sample management module, from the central spam samples library module of its sample management module, extract new characteristics of spam by the characteristics of spam classification, central manager is by the collection apparatus module of its Features Management module simultaneously, the characteristics of spam that the feature reporting module of collection mail filter Features Management module initiatively reports, central manager merges characteristics of spam by the feature merging module of its Features Management module, remove repeated characteristic, and to after carrying out Ageing Treatment above the characteristics of spam of setting the time limit, according to the full text feature, IP blacklist feature, address blacklist feature, fingerprint characteristic, classifications such as key characteristics are stored in the characteristics of spam classification in the characteristics of spam library module of its Features Management module, thereby set up the characteristics of spam storehouse of central manager.
The characteristics of spam storehouse forget processing, be meant characteristics of spam storehouse each characteristics of spam logging timestamp, and remove each characteristics of spam that reaches the setting-up time time limit depositing in; According to operating experience, the described setting-up time time limit generally can be set at 3 months.
Each mail filter is set according to the operating load situation of network communication state between central manager, the mail filter and central manager from the timing of central manager download characteristics of spam, and timing is one day.
The time limit of Ageing Treatment is set at 90 days.
The feature distribution comprises increment distribution and full dose distribution, and the full dose distribution is meant that all characteristics of spam with central characteristics of spam storehouse are distributed to each mail filter; Increment distribution is meant that central characteristics of spam storehouse downloads the characteristics of spam that historical record is determined the needs distribution according to the characteristics of spam of mail filter, avoids repeating distribution.
As mentioned above, just can realize the present invention preferably.

Claims (10)

1, based on the Spam filtering system of mail server, comprise that a plurality of mail filters reach mail server, the Mail Clients that connects successively thereafter, it is characterized in that: a plurality of described mail filters also are connected with central manager simultaneously by the Internet, described central manager, mail filter all comprise sample management module, Features Management module respectively, and the sample management module of described central manager, the Features Management module is corresponding by the Internet is connected respectively with the sample management module of mail filter, Features Management module.
2, by the described Spam filtering system based on mail server of claim 1, it is characterized in that: described central manager sample management module comprises sample collection module, sample auditing module, sample storage module and the central spam samples library module that connects successively; Described central manager Features Management module comprises that collection apparatus module, feature merge module, characteristic extracting module, feature distribution module and central characteristics of spam library module, described feature merges module and is connected with collection apparatus module, characteristic extracting module, central characteristics of spam library module respectively, the feature distribution module is connected with central characteristics of spam library module, and characteristic extracting module is connected with central spam samples library module;
Described mail filter sample management module comprises sample download module, sample auditing module, sample reporting module, sample process module and spam samples library module, the sample download module is connected with the sample auditing module, sample auditing module, sample reporting module, sample process module are connected with the spam samples library module respectively, and the sample reporting module also is connected by the sample collection module of the Internet with described central manager Features Management module; Described mail filter Features Management module comprises that the feature download module, the feature that connect successively merge module, characteristics of spam library module, feature reporting module, its feature merges module and is connected with the sample process module, and feature download module, feature reporting module also are connected respectively by feature distribution module, the collection apparatus module of the Internet corresponding and described central manager Features Management module.
3, based on the rubbish mail filtering method of the Spam filtering system of mail server, it is characterized in that: set up spam samples storehouse and characteristics of spam storehouse in mail filter, spam samples and characteristics of spam can be uploaded, be shared in the spam samples storehouse of each mail filter and characteristics of spam storehouse by the Internet; Central manager is extracted characteristics of spam and classification by gathering and handle spam samples and the characteristics of spam that each mail filter or Mail Clients are submitted to, sets up central spam samples storehouse, central characteristics of spam storehouse; Each mail filter regularly or by manual is downloaded characteristics of spam to upgrade the characteristics of spam storehouse of mail filter from central manager, realize that characteristics of spam is shared synchronously, and carry out the filtration of spam according to its characteristics of spam storehouse, and processing must be regularly forgotten in the characteristics of spam storehouse of described central manager, mail filter.
4, rubbish mail filtering method by the described Spam filtering system based on mail server of claim 3, it is characterized in that: the foundation in the spam samples storehouse of described mail filter, be meant that mail filter passes through the sample download module of its sample management module, gather on the Internet or spam sample that Mail Clients initiatively reports, and the sample auditing module that is sent to its sample management module is examined screening, avoid the user to submit to the malice mail that system handles is impacted, examine in the spam samples library module that later spam samples directly enters its sample management module, and the storage of classifying, thereby set up the spam samples storehouse of mail filter.
5, rubbish mail filtering method by the described Spam filtering system based on mail server of claim 3, it is characterized in that: the foundation in the characteristics of spam storehouse of described mail filter, be meant that mail filter passes through the sample process module of its sample management module, from the spam samples library module of its sample management module, extract spam samples and analyze and extract characteristics of spam, mail filter is by the feature download module of its Features Management module simultaneously, download characteristics of spam from the feature distribution module of central manager feature administration module, mail filter merges characteristics of spam by the feature merging module of its Features Management module, after removing repeated characteristic, characteristics of spam classification is stored in the characteristics of spam library module of its Features Management module, thereby sets up the characteristics of spam storehouse of mail filter.
6, rubbish mail filtering method by the described Spam filtering system based on mail server of claim 3, it is characterized in that: the foundation in the spam samples storehouse of described central manager, be meant that central manager passes through the sample collection module of its sample management module, gather the sample reporting module of each mail filter sample management module or the spam samples that Mail Clients initiatively reports, and the sample auditing module that is sent to central manager sample management module is examined screening, avoid the user to submit to the malice mail (as virus email, super large mail etc.) system handles is impacted, examine later spam samples through the sample storage module of the central manager sample management module buffer memory of classifying, and send in the central spam samples library module of its sample management module, thereby set up the spam samples storehouse of central manager.
7, rubbish mail filtering method by the described Spam filtering system based on mail server of claim 3, it is characterized in that: the foundation in the characteristics of spam storehouse of described central manager, be meant that central manager passes through the characteristic extracting module of its sample management module, from the central spam samples library module of its sample management module, extract new characteristics of spam by the characteristics of spam classification, central manager is by the collection apparatus module of its Features Management module simultaneously, the characteristics of spam that the feature reporting module of collection mail filter Features Management module initiatively reports, central manager merges characteristics of spam by the feature merging module of its Features Management module, remove repeated characteristic, and to after carrying out Ageing Treatment above the characteristics of spam of setting the time limit, characteristics of spam classification is stored in the characteristics of spam library module of its Features Management module, thereby sets up the characteristics of spam storehouse of central manager.
8, by the rubbish mail filtering method of the described Spam filtering system based on mail server of claim 3, it is characterized in that: the classification of described spam samples comprises mail, the mail that meets the address blacklist, the mail that meets fingerprint characteristic that meets the IP blacklist, the mail that meets keyword; The classification of described characteristics of spam comprises feature, IP blacklist feature, address blacklist feature, fingerprint characteristic, key characteristics in full.
9, by the rubbish mail filtering method of the described Spam filtering system based on mail server of claim 3, it is characterized in that: described characteristics of spam storehouse forget processing, be meant characteristics of spam storehouse each characteristics of spam logging timestamp, and remove each characteristics of spam that reaches the setting-up time time limit depositing in; The described setting-up time time limit is 3 months; The timing that described each mail filter is downloaded characteristics of spam from central manager is one day; The time limit of described Ageing Treatment is set at 90 days.
10, by the rubbish mail filtering method of the described Spam filtering system based on mail server of claim 3, it is characterized in that: described feature distribution comprises increment distribution and full dose distribution, and the full dose distribution is meant that all characteristics of spam with central characteristics of spam storehouse are distributed to each mail filter; Increment distribution is meant that central characteristics of spam storehouse downloads the characteristics of spam that historical record is determined the needs distribution according to the characteristics of spam of mail filter, avoids repeating distribution.
CNB2006100369488A 2006-08-04 2006-08-04 Rubbish mail filtration system and method based on email server Expired - Fee Related CN100499599C (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CNB2006100369488A CN100499599C (en) 2006-08-04 2006-08-04 Rubbish mail filtration system and method based on email server

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CNB2006100369488A CN100499599C (en) 2006-08-04 2006-08-04 Rubbish mail filtration system and method based on email server

Publications (2)

Publication Number Publication Date
CN1909520A true CN1909520A (en) 2007-02-07
CN100499599C CN100499599C (en) 2009-06-10

Family

ID=37700514

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB2006100369488A Expired - Fee Related CN100499599C (en) 2006-08-04 2006-08-04 Rubbish mail filtration system and method based on email server

Country Status (1)

Country Link
CN (1) CN100499599C (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103379095A (en) * 2012-04-18 2013-10-30 华为技术有限公司 Spam message report information sharing method, spam message report information sharing system, and service server
CN103595583A (en) * 2013-11-12 2014-02-19 国家电网公司 Embedded type mail security monitoring and control method based on intranet new mail platform
WO2014036787A1 (en) * 2012-09-07 2014-03-13 盈世信息科技(北京)有限公司 Mail process method and system
CN110417643A (en) * 2019-07-29 2019-11-05 世纪龙信息网络有限责任公司 Email processing method and device

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103379095A (en) * 2012-04-18 2013-10-30 华为技术有限公司 Spam message report information sharing method, spam message report information sharing system, and service server
WO2014036787A1 (en) * 2012-09-07 2014-03-13 盈世信息科技(北京)有限公司 Mail process method and system
CN103595583A (en) * 2013-11-12 2014-02-19 国家电网公司 Embedded type mail security monitoring and control method based on intranet new mail platform
CN103595583B (en) * 2013-11-12 2017-07-28 国家电网公司 Embedded Email security monitoring method based on Intranet new mail platform
CN110417643A (en) * 2019-07-29 2019-11-05 世纪龙信息网络有限责任公司 Email processing method and device
CN110417643B (en) * 2019-07-29 2021-10-08 世纪龙信息网络有限责任公司 Mail processing method and device

Also Published As

Publication number Publication date
CN100499599C (en) 2009-06-10

Similar Documents

Publication Publication Date Title
US11588828B2 (en) Systems and methods for automated retrieval, processing, and distribution of cyber-threat information
CN110460594B (en) Threat information data acquisition processing method, device and storage medium
CN107395570B (en) Cloud platform auditing system based on big data management analysis
DE202012013734U1 (en) System for filtering spam messages based on user reputation
CN1774706A (en) Framework to enable integration of anti-spam technologies
CN1716293A (en) Incremental anti-spam lookup and update service
DE202010018642U1 (en) System for detection of previously unknown malware
CN1863170A (en) Method for processing junk E-mail and computer readable memory medium
CN105138709B (en) Remote evidence taking system based on physical memory analysis
CN102567873A (en) Email filtering using relationship and reputation data
CN103746982B (en) A kind of http network condition code automatic generation method and its system
CN101794390B (en) Image fingerprint extracting method and equipment thereof, and information filtering method and system thereof
CN1145316C (en) Method for filtering electronic mail contents in interconnection network
CN102012926A (en) Extensible method and system for reporting negative information
CN100499599C (en) Rubbish mail filtration system and method based on email server
CN1350247A (en) E-mail content monitoring system
CN103235918B (en) The collection method of trusted file and system
CN1746916A (en) Network IP address credit assessment and use in electronic mail system
CN101699818B (en) Anti-spam management system and method thereof
WO2021021733A1 (en) Threat mitigation system and method
CN103873348A (en) E-mail filter method and system
Simon et al. Scan detection: A data mining approach
CN102916947A (en) Cloud computing-based anti-spam system
Symovonyk et al. Evaluation and analysis of activity in social networks in the context of the digital economy development
CN1350246A (en) Intelligent e-mail content filtering method

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20090610

Termination date: 20160804