CN109818920A - Mail checking method, device, computer equipment and computer readable storage medium - Google Patents
Mail checking method, device, computer equipment and computer readable storage medium Download PDFInfo
- Publication number
- CN109818920A CN109818920A CN201811528531.2A CN201811528531A CN109818920A CN 109818920 A CN109818920 A CN 109818920A CN 201811528531 A CN201811528531 A CN 201811528531A CN 109818920 A CN109818920 A CN 109818920A
- Authority
- CN
- China
- Prior art keywords
- concerning security
- security matters
- preset
- word
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Landscapes
- Information Transfer Between Computers (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiment of the invention discloses a kind of mail checking method, device, computer equipment and storage mediums.Wherein, which comprises if receiving mail, judge whether the mail is concerning security matters mail；If the mail is not concerning security matters mail, the mail is sent to mail server, the mail to be sent to the addressee of the mail by mail server；If the mail is concerning security matters mail, the mail is sent to target auditor, to be audited by target auditor to the mail, wherein the target audit artificially has the target object of default mapping relations with the sender of the mail；Receive the auditing result that target auditor sends, and the mail is handled according to the auditing result, so as to automatic identification concerning security matters mail, and concerning security matters mail is only sent to target auditor audit, the workload of mail auditor can be greatly reduced, mail review efficiency is improved, the business efficiency of enterprise is improved.
Description
Technical field
The present invention relates to enterprise information security technical fields more particularly to a kind of mail checking method, device, computer to set
Standby and storage medium.
Background technique
With increasingly fierce, the importance of more and more Enterprise Consciousness to enterprise security of competition among enterprises.Enterprise security
It is that enterprise is instigated to be in comprehensively reliably, by state of a control.In order to achieve the purpose that enterprise security, enterprise has put into effect all kinds of
Safety measure.Wherein, it is ensured that the mail security of enterprise is pith therein.
In the prior art, in order to ensure the mail security of enterprise, the method taken is for setting up mail examining department, by mail
The personnel of the examining department outgoing mail all to enterprise is audited, and is just let pass after the approval.With upper type inefficiency,
Seriously drag the regular traffic efficiency of Man Liao enterprise.
Summary of the invention
The embodiment of the invention provides a kind of mail checking method, device, computer equipment and storage mediums, it is intended to solve
The problem of existing mail checking method inefficiency.
In a first aspect, the embodiment of the invention provides a kind of mail checking methods comprising:
If receiving mail, judge whether the mail is concerning security matters mail；
If the mail is not concerning security matters mail, the mail is sent to mail server, with by mail server by institute
State the addressee that mail is sent to the mail；
If the mail is concerning security matters mail, the mail is sent to target auditor, with by target auditor to described
Mail is audited, wherein the target audit artificially has the target pair of default mapping relations with the sender of the mail
As；
The auditing result that target auditor sends is received, and the mail is handled according to the auditing result.
Second aspect, the embodiment of the invention also provides a kind of mails to audit device comprising:
First judging unit, if judging whether the mail is concerning security matters mail for receiving mail；
The mail is sent to mail server if not being concerning security matters mail for the mail by the first transmission unit, with
The mail is sent to the addressee of the mail by mail server；
It audits unit and the mail is sent to target auditor, by target if being concerning security matters mail for the mail
Auditor audits the mail, wherein the target audit artificially has default mapping with the sender of the mail
The target object of relationship；
Processing unit, for receiving the auditing result of target auditor transmission, and according to the auditing result to the postal
Part is handled.
The third aspect, the embodiment of the invention also provides a kind of computer equipments comprising memory and processor, it is described
Computer program is stored on memory, the processor realizes the above method when executing the computer program.
Fourth aspect, the embodiment of the invention also provides a kind of computer readable storage medium, the storage medium storage
There is computer program, the computer program can realize the above method when being executed by a processor.
The embodiment of the invention provides a kind of mail checking method, device, computer equipment and storage mediums.Wherein, institute
If the method for stating includes: to receive mail, judge whether the mail is concerning security matters mail；It, will if the mail is not concerning security matters mail
The mail is sent to mail server, the mail to be sent to the addressee of the mail by mail server；If institute
Stating mail is concerning security matters mail, and the mail is sent to target auditor, to be audited by target auditor to the mail,
Wherein, the target audit artificially has the target object of default mapping relations with the sender of the mail；Target is received to examine
The auditing result that core human hair is sent, and the mail is handled according to the auditing result.The technical side of the embodiment of the present invention
Case judges whether mail is concerning security matters mail, if the mail is not concerning security matters mail, by institute when determining mail for outgoing mail
It states mail and is sent to mail server, the mail to be sent to the addressee of the mail by mail server；If postal
Part is concerning security matters mail, and mail is sent to target auditor, to be audited by target auditor to the mail；According to target
The auditing result of auditor handles the mail.Concerning security matters mail is sent to mesh by automatic identification concerning security matters mail, and only
Auditor's audit is marked, the workload of mail auditor can be greatly reduced, mail review efficiency is improved, improve enterprise
Business efficiency.
Detailed description of the invention
Technical solution in order to illustrate the embodiments of the present invention more clearly, below will be to needed in embodiment description
Attached drawing is briefly described, it should be apparent that, drawings in the following description are some embodiments of the invention, general for this field
For logical technical staff, without creative efforts, it is also possible to obtain other drawings based on these drawings.
Fig. 1 is a kind of application scenarios schematic diagram of mail checking method provided in an embodiment of the present invention；
Fig. 2 is a kind of flow diagram of mail checking method provided in an embodiment of the present invention；
Fig. 3 is a kind of sub-process schematic diagram of mail checking method provided in an embodiment of the present invention；
Fig. 4 is a kind of sub-process schematic diagram of mail checking method provided in an embodiment of the present invention；
Fig. 5 is a kind of sub-process schematic diagram of mail checking method provided in an embodiment of the present invention；
Fig. 6 be another embodiment of the present invention provides a kind of mail checking method flow diagram；
Fig. 7 is the schematic block diagram that a kind of mail provided in an embodiment of the present invention audits device；
Fig. 8 is the schematic block diagram for the first judging unit that a kind of mail provided in an embodiment of the present invention audits device；
Fig. 9 is the schematic block diagram for the 4th judging unit that a kind of mail provided in an embodiment of the present invention audits device；
Figure 10 is the schematic block diagram for the processing unit that a kind of mail provided in an embodiment of the present invention audits device；
Figure 11 be another embodiment of the present invention provides a kind of mail audit device schematic block diagram；And
Figure 12 is a kind of schematic block diagram of computer equipment provided in an embodiment of the present invention.
Specific embodiment
Following will be combined with the drawings in the embodiments of the present invention, and technical solution in the embodiment of the present invention carries out clear, complete
Site preparation description, it is clear that described embodiments are some of the embodiments of the present invention, instead of all the embodiments.Based on this hair
Embodiment in bright, every other implementation obtained by those of ordinary skill in the art without making creative efforts
Example, shall fall within the protection scope of the present invention.
It should be appreciated that ought use in this specification and in the appended claims, term " includes " and "comprising" instruction
Described feature, entirety, step, operation, the presence of element and/or component, but one or more of the other feature, whole is not precluded
Body, step, operation, the presence or addition of element, component and/or its set.
It is also understood that mesh of the term used in this description of the invention merely for the sake of description specific embodiment
And be not intended to limit the present invention.As description of the invention and it is used in the attached claims, unless on
Other situations are hereafter clearly indicated, otherwise " one " of singular, "one" and "the" are intended to include plural form.
It will be further appreciated that the term "and/or" used in description of the invention and the appended claims is
Refer to any combination and all possible combinations of one or more of associated item listed, and including these combinations.
As used in this specification and in the appended claims, term " if " can be according to context quilt
Be construed to " when ... " or " once " or " in response to determination " or " in response to detecting ".Similarly, phrase " if it is determined that " or
" if detecting [described condition or event] " can be interpreted to mean according to context " once it is determined that " or " in response to true
It is fixed " or " once detecting [described condition or event] " or " in response to detecting [described condition or event] ".
Fig. 1 and Fig. 2 are please referred to, Fig. 1 is a kind of application scenarios signal of mail checking method provided in an embodiment of the present invention
Figure.Fig. 2 is a kind of schematic flow chart of mail checking method provided in an embodiment of the present invention.The one of it is proposed of the embodiment of the present invention
Kind mail checking method is applied in mail management server 2.Mail management server 2 is in the mail for receiving the transmission of terminal 1
When, judge whether the mail is concerning security matters mail；If the mail is not concerning security matters mail, mail management server 2 sends the mail
To mail server 3, the mail to be sent to the addressee of the mail by mail server 3；If the mail is concerning security matters mail,
The mail is sent to audit terminal 4, to be audited by target auditor to the mail, audit terminal 4 is received and sends
Auditing result, and the mail is handled according to auditing result.
Fig. 2 is the flow diagram of mail checking method provided in an embodiment of the present invention.As shown, this method include with
Lower step S1-S4.
S1 judges whether the mail is concerning security matters mail if receiving mail.
In the present solution, mail management server is arranged between each terminal and mail server of enterprise, terminal is sent
Mail first reach mail management server, the mail is audited by mail management server, and passes through in audit
The mail is sent to mail server afterwards.
In specific implementation, mail management server is receiving mail, judges whether the mail is concerning security matters mail.Concerning security matters postal
Part refers to the mail of the business secret of enterprise.
In one embodiment, as shown in figure 3, the step S1 may include step S11-S17.
S11 judges whether the mail includes attachment.
In specific implementation, judge whether the mail includes attachment.The attachment of mail include as document (for example, Word document,
Exls document and CAD document etc.) and the files such as compressed package.Attachment can carry a large amount of information, in order to ensure the quotient of enterprise
Industry secret is not revealed, and needs to audit the content of attachment, therefore, it is determined that the mail for carrying attachment is privacy enhanced mail.
If the mail includes attachment, step S14 is gone to, step S12 is otherwise gone to.
S12, judges whether the text quantity of the body part of the mail is greater than preset amount threshold.
In specific implementation, if mail does not include attachment, further judge that the text quantity of the body part of mail is
It is no to be greater than preset amount threshold.It should be noted that amount threshold can be carried out according to the actual situation by those skilled in the art
Setting, for example, in one embodiment, amount threshold is set as 5.
If the text quantity of mail body parts is seldom (for example, 1-5 word), the information that can be transmitted of mail compared with
It is few, think that the mail is non-concerning security matters mail at this time.Correspondingly, it if the text quantity of the body part of mail is more, needs pair
Mail is audited.
Specifically, if the text quantity of the body part of the mail is not more than preset amount threshold, step is gone to
Otherwise rapid S15 goes to step S13.
S13 judges whether the body part of the mail includes preset concerning security matters word.
In specific implementation, if the text quantity of the body part of mail is greater than preset amount threshold, further sentence
Whether the body part of disconnected mail includes preset concerning security matters word.In specific implementation, concerning security matters word can by those skilled in the art according to
The actual conditions of enterprise are set.For example, enterprise is the enterprise for studying big data technology, then it can be by the phase with big data technology
It closes word and is set as concerning security matters word.
Specifically, if the body part of the mail does not include preset concerning security matters word, step S15 is gone to, is otherwise turned
To step S14.
S14 determines the mail for concerning security matters mail.
S15 determines that the mail is non-concerning security matters mail.
In one embodiment, as shown in figure 4, the step S13 may include step S151-S154.
S151 carries out word segmentation processing to the body part of the mail, obtains sample to be tested.
In specific implementation, word segmentation processing is a basic steps in text-processing, i.e., mentions from the body part of mail
Word is taken out as sample to be tested.In order to reduce operand (if not removing stop-word be also required to comparison judge its whether be
Concerning security matters word, increases operand), need to remove the stop-word in the body part of mail.Stop-word (stop word), Chang Wei
Preposition, adverbial word or conjunction etc..For example, " ", " the inside ", " also ", " ", " it ", " being " etc. be all stop-word.
Whether S152 judges in sample to be tested comprising preset concerning security matters word.
In specific implementation, judge whether the word in the body part of mail is preset concerning security matters word one by one, if so, sentencing
Determine in the body part of mail comprising preset concerning security matters word；If all words are not preset in the body part of mail
Concerning security matters word determines not including preset concerning security matters word in the body part of mail.
S153 determines that the body part of the mail includes preset relates to if in sample to be tested including preset concerning security matters word
Close word.
In specific implementation, if including preset concerning security matters word in sample to be tested, determine that the body part of the mail includes
Preset concerning security matters word.
It is default to determine that the body part of the mail does not include if not including preset concerning security matters word in sample to be tested by S154
Concerning security matters word.
In specific implementation, if not including preset concerning security matters word in sample to be tested, the body part of the mail is determined not
Include preset concerning security matters word.
The mail is sent to mail server if the mail is not concerning security matters mail by S2, to be incited somebody to action by mail server
The mail is sent to the addressee of the mail.
In specific implementation, if the mail is not concerning security matters mail, it will illustrate that the mail does not include enterprise's concerning security matters content.This
When, the mail is directly sent to mail server.Correspondingly, mail server, can be by the mail when receiving the mail
Correspondingly it is sent to the addressee of the mail.
The mail is sent to target auditor if the mail is concerning security matters mail by S3, with by target auditor to institute
It states mail to be audited, wherein the target audit artificially has the target of default mapping relations with the sender of the mail
Object.
In specific implementation, if mail is concerning security matters mail, which is sent to target auditor, to be audited by target
People audits the mail.It should be noted that target audit artificially there is default mapping to close with the sender of the mail
The target object of system.For example, target audits the leading body at a higher level of artificial sender.
In concrete operations, the mapping relations of sender Yu target auditor are preset, when receiving concerning security matters mail, root
The corresponding target auditor of sender of mail is determined according to the mapping relations.
S4 receives the auditing result that target auditor sends, and is handled according to the auditing result the mail.
In specific implementation, the auditing result that target auditor sends is received, and according to target auditor's auditing result pair
The mail is handled.Specifically, if audit passes through, the mail of letting pass intercepts the mail if audit does not pass through.
In one embodiment, auditing result includes that audit passes through and audits not by as shown in figure 5, the step S4 can
Including step S41-S43.
S41 judges whether the auditing result is that audit passes through.
The mail is sent to mail server, by mail service if the auditing result is that audit passes through by S42
The mail is sent to the addressee of the mail by device.
In specific implementation, if the auditing result of target auditor is that audit passes through, the mail is directly sent to postal
Part server.Correspondingly, which can be correspondingly sent to the addressee of the mail when receiving the mail by mail server
People.
S43 intercepts the mail, and send to the sender of the mail if the auditing result is that audit does not pass through
Mail interception notice.
In specific implementation, if the auditing result of target auditor is that audit does not pass through, the mail is intercepted, and to postal
The sender of part sends mail interception notice, has informed the not sent success of sender's mail.
The technical solution of the embodiment of the present invention judges whether mail is concerning security matters mail when determining mail for outgoing mail,
If the mail is not concerning security matters mail, the mail is sent to mail server, to be sent out the mail by mail server
Give the addressee of the mail；If mail is concerning security matters mail, mail is sent to target auditor, by target auditor
The mail is audited；The mail is handled according to the auditing result of target auditor.Pass through automatic identification concerning security matters
Mail, and concerning security matters mail is only sent to target auditor audit, the workload of mail auditor can be greatly reduced, is improved
Mail review efficiency, improves the business efficiency of enterprise.
Fig. 6 be another embodiment of the present invention provides a kind of mail checking method flow diagram.As shown in fig. 6, this
The mail checking method of embodiment includes step S61-S66.
S61 judges whether the addressee of the mail belongs to preset internal addressee's set if receiving mail.
In specific implementation, it is pre- to judge whether the addressee of the mail belongs to when receiving mail for mail management server
If inside addressee set.Internal addressee's set refers to the set being made of all addressees of enterprises.If should
The addressee's of mail belongs to internal addressee's set, then illustrates otherwise the artificial internal staff of the addressee of the mail then says
The addressee of the bright mail is not internal staff (i.e. enterprise external personnel).
If the addressee of mail belongs to preset internal addressee's set, step S62 is gone to, step S63 is otherwise gone to.
The mail is sent to mail server by S62, the mail is sent to the mail by mail server
Addressee.
In specific implementation, if the addressee of the mail belongs to preset internal addressee's set, illustrate the mail
The artificial internal staff of addressee, which is the mail that sends mutually of internal staff.At this point, directly the mail is sent out
Give mail server.Correspondingly, which can be correspondingly sent to the mail when receiving the mail by mail server
Addressee.
S63 judges whether the mail is concerning security matters mail.
In the present solution, mail management server is arranged between each terminal and mail server of enterprise, terminal is sent
Mail first reach mail management server, the mail is audited by mail management server, and passes through in audit
The mail is sent to mail server afterwards.
In specific implementation, if the addressee of the mail is not belonging to preset internal addressee's set, further judge
Whether the mail is concerning security matters mail.
If the mail is concerning security matters mail, step S64 is gone to, otherwise goes to step S62.
The mail is sent to target auditor by S64, to be audited by target auditor to the mail, wherein
The target audit artificially has the target object of default mapping relations with the sender of the mail.
In specific implementation, if mail is concerning security matters mail, which is sent to target auditor, to be audited by target
People audits the mail.It should be noted that target auditor is corresponding with the sender of the mail.For example, target is examined
The leading body at a higher level of the artificial sender of core.
In concrete operations, the mapping relations of sender Yu target auditor are preset, when receiving concerning security matters mail, root
The corresponding target auditor of sender of mail is determined according to the mapping relations.
S65, receive target auditor send auditing result, and according to the auditing result to the mail at
Reason.
In specific implementation, the auditing result that target auditor sends is received, and according to target auditor's auditing result pair
The mail is handled.Specifically, if audit passes through, the mail of letting pass intercepts the mail if audit does not pass through.
Fig. 7 is a kind of schematic block diagram of mail audit device 70 provided in an embodiment of the present invention.As shown in fig. 7, corresponding
In the above mail checking method, the present invention also provides a kind of mails to audit device 70.It includes for holding that the mail, which audits device 70,
The unit of the above-mentioned mail checking method of row, the device can be configured in server.Specifically, referring to Fig. 7, the mail is examined
Nuclear device 70 includes the first judging unit 71, the first transmission unit 72, audit unit 73 and processing unit 74.
First judging unit 71, if judging whether the mail is concerning security matters mail for receiving mail.
The mail is sent to mail server if not being concerning security matters mail for the mail by the first transmission unit 72,
The mail to be sent to the addressee of the mail by mail server.
It audits unit 73 and the mail is sent to target auditor, by mesh if being concerning security matters mail for the mail
Mark auditor audits the mail, wherein the target audit artificially has default reflect with the sender of the mail
Penetrate the target object of relationship.
Processing unit 74, for receiving the auditing result of target auditor transmission, and according to the auditing result to described
Mail is handled.
In one embodiment, as shown in figure 8, first judging unit 71 determines including second judgment unit 711, first
Unit 712, third judging unit 713, the second judging unit 714, the 4th judging unit 715, third judging unit 716 and
Four judging units 717.
Second judgment unit 711, for judging whether the mail includes attachment.
First judging unit 712 determines the mail for concerning security matters mail if including attachment for the mail.
Third judging unit 713 judges the text of the body part of the mail if not including attachment for the mail
Whether quantity is greater than preset amount threshold.
Second judging unit 714, if the text quantity of the body part for the mail is not more than preset quantity threshold
Value determines that the mail is non-concerning security matters mail.
4th judging unit 715, if the text quantity of the body part for the mail is greater than preset amount threshold,
Whether the body part for judging the mail includes preset concerning security matters word.
Third judging unit 716 determines the mail if the body part for the mail includes preset concerning security matters word
For concerning security matters mail.
4th judging unit 717 determines the postal if the body part for the mail does not include preset concerning security matters word
Part is non-concerning security matters mail.
In one embodiment, as shown in figure 9, the 4th judging unit 715 includes that the judgement of participle unit the 7151, the 5th is single
First 7152, the 5th judging unit 7153 and the 6th judging unit 7154.
Participle unit 7151 carries out word segmentation processing for the body part to the mail, obtains sample to be tested.
5th judging unit 7152, for whether judging in sample to be tested comprising preset concerning security matters word.
5th judging unit 7153, if determining the text of the mail for including preset concerning security matters word in sample to be tested
Part includes preset concerning security matters word.
6th judging unit 7154, if determining the mail just for not including preset concerning security matters word in sample to be tested
Literary part does not include preset concerning security matters word.
In one embodiment, the auditing result includes auditing to pass through and audit not passing through, as shown in Figure 10, the place
Managing unit 74 includes the 6th judging unit 741, the second transmission unit 742 and interception unit 743.
6th judging unit 741, for judging whether the auditing result is that audit passes through.
The mail is sent to mail service if being that audit passes through for the auditing result by the second transmission unit 742
Device, the mail to be sent to the addressee of the mail by mail server.
Interception unit 743 intercepts the mail if being that audit does not pass through for the auditing result, and to the mail
Sender send mail interception notice.
Figure 11 be another embodiment of the present invention provides a kind of mail audit device 70 schematic block diagram.Such as Figure 11 institute
Show, the mail of the present embodiment audit device 70 is to increase the 7th judging unit 75 on the basis of above-described embodiment.
7th judging unit 75, for judging whether the addressee of the mail belongs to preset internal addressee's set.
It should be noted that it is apparent to those skilled in the art that, above-mentioned mail audits 70 He of device
The specific implementation process of each unit can refer to the corresponding description in preceding method embodiment, for convenience of description and succinctly,
Details are not described herein.
Above-mentioned mail audit device 70 can be implemented as a kind of form of computer program, which can be such as
It is run in computer equipment shown in Figure 12.
Figure 12 is please referred to, Figure 12 is a kind of schematic block diagram of computer equipment provided by the embodiments of the present application.The calculating
Machine equipment 500 can be terminal, be also possible to server, wherein terminal can be smart phone, tablet computer, notebook electricity
Brain, desktop computer, personal digital assistant and wearable device etc. have the electronic equipment of communication function.Server can be independence
Server, be also possible to the server cluster of multiple servers composition.
Refering to fig. 12, which includes processor 502, memory and the net connected by system bus 501
Network interface 505, wherein memory may include non-volatile memory medium 503 and built-in storage 504.
The non-volatile memory medium 503 can storage program area 5031 and computer program 5032.The computer program
5032 are performed, and processor 502 may make to execute a kind of mail checking method.
The processor 502 is for providing calculating and control ability, to support the operation of entire computer equipment 500.
The built-in storage 504 provides environment for the operation of the computer program 5032 in non-volatile memory medium 503, should
When computer program 5032 is executed by processor 502, processor 502 may make to execute a kind of mail checking method.
The network interface 505 is used to carry out network communication with other equipment.It will be understood by those skilled in the art that in Figure 12
The structure shown, only the block diagram of part-structure relevant to application scheme, does not constitute and is applied to application scheme
The restriction of computer equipment 500 thereon, specific computer equipment 500 may include more more or fewer than as shown in the figure
Component perhaps combines certain components or with different component layouts.
Wherein, the processor 502 is for running computer program 5032 stored in memory, to realize following step
It is rapid:
If receiving mail, judge whether the mail is concerning security matters mail；
If the mail is not concerning security matters mail, the mail is sent to mail server, with by mail server by institute
State the addressee that mail is sent to the mail；
If the mail is concerning security matters mail, the mail is sent to target auditor, with by target auditor to described
Mail is audited, wherein the target audit artificially has the target pair of default mapping relations with the sender of the mail
As；
The auditing result that target auditor sends is received, and the mail is handled according to the auditing result.
In one embodiment, processor 502 realize it is described judge whether the mail is concerning security matters mail step when, specifically
Realize following steps:
Judge whether the mail includes attachment；
If the mail includes attachment, determine the mail for concerning security matters mail；
If the mail does not include attachment, judge whether the text quantity of the body part of the mail is greater than preset number
Measure threshold value；
If the text quantity of the body part of the mail is not more than preset amount threshold, determine that the mail is non-relates to
Close mail；
If the text quantity of the body part of the mail is greater than preset amount threshold, the textual of the mail is judged
Whether divide includes preset concerning security matters word；
If the body part of the mail includes preset concerning security matters word, determine the mail for concerning security matters mail；
If the body part of the mail does not include preset concerning security matters word, determine that the mail is non-concerning security matters mail.
In one embodiment, processor 502 is realizing whether the body part for judging the mail includes preset
When concerning security matters word step, it is implemented as follows step:
Word segmentation processing is carried out to the body part of the mail, obtains sample to be tested；
Whether judge in sample to be tested comprising preset concerning security matters word；
If in sample to be tested including preset concerning security matters word, determine that the body part of the mail includes preset concerning security matters word；
If not including preset concerning security matters word in sample to be tested, determine that the body part of the mail does not include preset concerning security matters
Word.
In one embodiment, the auditing result includes auditing to pass through and audit not passing through, and processor 502 is realizing institute
When stating according to the auditing result to mail progress processing step, it is implemented as follows step:
If the auditing result is that audit passes through, the mail is sent to mail server, to be incited somebody to action by mail server
The mail is sent to the addressee of the mail；
If the auditing result is that audit does not pass through, the mail is intercepted, and send mail to the sender of the mail
Intercept notice.
In one embodiment, processor 502 also realizes following steps:
Judge whether the addressee of the mail belongs to preset internal addressee's set；
If the addressee of the mail belongs to preset internal addressee's set, the mail is sent to mail service
Device, the mail to be sent to the addressee of the mail by mail server；
If the addressee of the mail is not belonging to preset internal addressee's set, whether execution is described judges the mail
The step of for concerning security matters mail.
It should be appreciated that in the embodiment of the present application, processor 502 can be central processing unit
(CentralProcessing Unit, CPU), which can also be other general processors, digital signal processor
(Digital Signal Processor, DSP), specific integrated circuit (Application Specific
IntegratedCircuit, ASIC), ready-made programmable gate array (Field-Programmable GateArray, FPGA) or
Person other programmable logic device, discrete gate or transistor logic, discrete hardware components etc..Wherein, general processor
It can be microprocessor or the processor be also possible to any conventional processor etc..
Those of ordinary skill in the art will appreciate that be realize above-described embodiment method in all or part of the process,
It is that relevant hardware can be instructed to complete by computer program.The computer program can be stored in a storage medium,
The storage medium is computer readable storage medium.The computer program is held by least one processor in the computer system
Row, to realize the process step of the embodiment of the above method.
Therefore, the present invention also provides a kind of storage mediums.The storage medium can be computer readable storage medium.This is deposited
Storage media is stored with computer program.The computer program makes processor execute following steps when being executed by processor:
If receiving mail, judge whether the mail is concerning security matters mail；
If the mail is not concerning security matters mail, the mail is sent to mail server, with by mail server by institute
State the addressee that mail is sent to the mail；
If the mail is concerning security matters mail, the mail is sent to target auditor, with by target auditor to described
Mail is audited, wherein the target audit artificially has the target pair of default mapping relations with the sender of the mail
As；
The auditing result that target auditor sends is received, and the mail is handled according to the auditing result.
In one embodiment, the processor realizes described whether judge the mail executing the computer program
When for concerning security matters mail step, it is implemented as follows step:
Judge whether the mail includes attachment；
If the mail includes attachment, determine the mail for concerning security matters mail；
If the mail does not include attachment, judge whether the text quantity of the body part of the mail is greater than preset number
Measure threshold value；
If the text quantity of the body part of the mail is not more than preset amount threshold, determine that the mail is non-relates to
Close mail；
If the text quantity of the body part of the mail is greater than preset amount threshold, the textual of the mail is judged
Whether divide includes preset concerning security matters word；
If the body part of the mail includes preset concerning security matters word, determine the mail for concerning security matters mail；
If the body part of the mail does not include preset concerning security matters word, determine that the mail is non-concerning security matters mail.
In one embodiment, the processor realizes the judgement mail just executing the computer program
When whether literary part includes preset concerning security matters word step, it is implemented as follows step:
Word segmentation processing is carried out to the body part of the mail, obtains sample to be tested；
Whether judge in sample to be tested comprising preset concerning security matters word；
If in sample to be tested including preset concerning security matters word, determine that the body part of the mail includes preset concerning security matters word；
If not including preset concerning security matters word in sample to be tested, determine that the body part of the mail does not include preset concerning security matters
Word.
In one embodiment, the auditing result includes auditing to pass through and audit not passing through, and the processor is executing
The computer program and realize it is described according to the auditing result to the mail carry out processing step when, be implemented as follows
Step:
If the auditing result is that audit passes through, the mail is sent to mail server, to be incited somebody to action by mail server
The mail is sent to the addressee of the mail；
If the auditing result is that audit does not pass through, the mail is intercepted, and send mail to the sender of the mail
Intercept notice.
In one embodiment, the processor also realizes following steps in the execution computer program:
Judge whether the addressee of the mail belongs to preset internal addressee's set；
If the addressee of the mail belongs to preset internal addressee's set, the mail is sent to mail service
Device, the mail to be sent to the addressee of the mail by mail server；
If the addressee of the mail is not belonging to preset internal addressee's set, whether execution is described judges the mail
The step of for concerning security matters mail.
The storage medium can be USB flash disk, mobile hard disk, read-only memory (Read-Only Memory, ROM), magnetic disk
Or the various computer readable storage mediums that can store program code such as CD.
Those of ordinary skill in the art may be aware that list described in conjunction with the examples disclosed in the embodiments of the present disclosure
Member and algorithm steps, can be realized with electronic hardware, computer software, or a combination of the two, in order to clearly demonstrate hardware
With the interchangeability of software, each exemplary composition and step are generally described according to function in the above description.This
A little functions are implemented in hardware or software actually, the specific application and design constraint depending on technical solution.Specially
Industry technical staff can use different methods to achieve the described function each specific application, but this realization is not
It is considered as beyond the scope of this invention.
In several embodiments provided by the present invention, it should be understood that disclosed device and method can pass through it
Its mode is realized.For example, the apparatus embodiments described above are merely exemplary.For example, the division of each unit, only
Only a kind of logical function partition, there may be another division manner in actual implementation.Such as multiple units or components can be tied
Another system is closed or is desirably integrated into, or some features can be ignored or not executed.
The steps in the embodiment of the present invention can be sequentially adjusted, merged and deleted according to actual needs.This hair
Unit in bright embodiment device can be combined, divided and deleted according to actual needs.In addition, in each implementation of the present invention
Each functional unit in example can integrate in one processing unit, is also possible to each unit and physically exists alone, can also be with
It is that two or more units are integrated in one unit.
If the integrated unit is realized in the form of SFU software functional unit and when sold or used as an independent product,
It can store in one storage medium.Based on this understanding, technical solution of the present invention is substantially in other words to existing skill
The all or part of part or the technical solution that art contributes can be embodied in the form of software products, the meter
Calculation machine software product is stored in a storage medium, including some instructions are used so that a computer equipment (can be a
People's computer, terminal or network equipment etc.) it performs all or part of the steps of the method described in the various embodiments of the present invention.
In the above-described embodiments, it all emphasizes particularly on different fields to the description of each embodiment, is not described in some embodiment
Part, reference can be made to the related descriptions of other embodiments.
Obviously, various changes and modifications can be made to the invention without departing from essence of the invention by those skilled in the art
Mind and range.In this way, the even these modifications and changes of the present invention range that belongs to the claims in the present invention and its equivalent technologies
Within, then the present invention is also intended to include these modifications and variations.
The above description is merely a specific embodiment, but scope of protection of the present invention is not limited thereto, any
Those familiar with the art in the technical scope disclosed by the present invention, can readily occur in various equivalent modifications or replace
It changes, these modifications or substitutions should be covered by the protection scope of the present invention.Therefore, protection scope of the present invention should be with right
It is required that protection scope subject to.
Claims (10)
1. a kind of mail checking method characterized by comprising
If receiving mail, judge whether the mail is concerning security matters mail；
If the mail is not concerning security matters mail, the mail is sent to mail server, with by mail server by the postal
Part is sent to the addressee of the mail；
If the mail is concerning security matters mail, the mail is sent to target auditor, with by target auditor to the mail
It is audited, wherein the target audit artificially has the target object of default mapping relations with the sender of the mail；
The auditing result that target auditor sends is received, and the mail is handled according to the auditing result.
2. mail checking method according to claim 1, which is characterized in that described to judge whether the mail is concerning security matters postal
Part, comprising:
Judge whether the mail includes attachment；
If the mail includes attachment, determine the mail for concerning security matters mail；
If the mail does not include attachment, judge whether the text quantity of the body part of the mail is greater than preset quantity threshold
Value；
If the text quantity of the body part of the mail is not more than preset amount threshold, determine that the mail is non-concerning security matters postal
Part.
3. mail checking method according to claim 2, which is characterized in that described to judge whether the mail is concerning security matters postal
Part, further includes:
If the text quantity of the body part of the mail is greater than preset amount threshold, judge that the body part of the mail is
No includes preset concerning security matters word；
If the body part of the mail includes preset concerning security matters word, determine the mail for concerning security matters mail；
If the body part of the mail does not include preset concerning security matters word, determine that the mail is non-concerning security matters mail.
4. mail checking method according to claim 3, which is characterized in that the body part of the judgement mail is
No includes preset concerning security matters word, comprising:
Word segmentation processing is carried out to the body part of the mail, obtains sample to be tested；
Whether judge in sample to be tested comprising preset concerning security matters word；
If in sample to be tested including preset concerning security matters word, determine that the body part of the mail includes preset concerning security matters word；
If not including preset concerning security matters word in sample to be tested, determine that the body part of the mail does not include preset concerning security matters word.
5. the method according to claim 1, wherein the auditing result includes that audit passes through and audits obstructed
It crosses, it is described that the mail is handled according to the auditing result, comprising:
Judge whether the auditing result is that audit passes through；
If the auditing result is that audit passes through, the mail is sent to mail server, with will be described by mail server
Mail is sent to the addressee of the mail；
If the auditing result is that audit does not pass through, the mail is intercepted, and send mail interception to the sender of the mail
Notice.
6. the method according to claim 1, wherein it is described judge the mail whether be concerning security matters mail it
Before, the method also includes:
Judge whether the addressee of the mail belongs to preset internal addressee's set；
If the addressee of the mail belongs to preset internal addressee's set, the mail is sent to mail server, with
The mail is sent to the addressee of the mail by mail server；
If the addressee of the mail is not belonging to preset internal addressee's set, execution is described to judge whether the mail is to relate to
The step of close mail.
7. a kind of mail audits device characterized by comprising
First judging unit, if judging whether the mail is concerning security matters mail for receiving mail；
The mail is sent to mail server, by postal if not being concerning security matters mail for the mail by the first transmission unit
The mail is sent to the addressee of the mail by part server；
It audits unit and the mail is sent to target auditor, to be audited by target if being concerning security matters mail for the mail
People audits the mail, wherein the target audit artificially has default mapping relations with the sender of the mail
Target object；
Processing unit, for receive target auditor transmission auditing result, and according to the auditing result to the mail into
Row processing.
8. mail according to claim 7 audits device, which is characterized in that first judging unit includes:
Second judgment unit, for judging whether the mail includes attachment；
First judging unit determines the mail for concerning security matters mail if including attachment for the mail；
Third judging unit judges that the text quantity of the body part of the mail is if not including attachment for the mail
It is no to be greater than preset amount threshold；
Second judging unit determines if the text quantity of the body part for the mail is not more than preset amount threshold
The mail is non-concerning security matters mail；
4th judging unit judges institute if the text quantity of the body part for the mail is greater than preset amount threshold
Whether the body part for stating mail includes preset concerning security matters word；
Third judging unit determines the mail for concerning security matters if the body part for the mail includes preset concerning security matters word
Mail；
4th judging unit determines that the mail is non-if the body part for the mail does not include preset concerning security matters word
Concerning security matters mail.
9. a kind of computer equipment, which is characterized in that the computer equipment includes memory and processor, on the memory
It is stored with computer program, the processor is realized as described in any one of claim 1-6 when executing the computer program
Method.
10. a kind of computer readable storage medium, which is characterized in that the computer-readable recording medium storage has computer journey
Sequence, the computer program can be realized when being executed by a processor such as method of any of claims 1-6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811528531.2A CN109818920B (en) | 2018-12-13 | 2018-12-13 | Mail auditing method and device, computer equipment and computer readable storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201811528531.2A CN109818920B (en) | 2018-12-13 | 2018-12-13 | Mail auditing method and device, computer equipment and computer readable storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN109818920A true CN109818920A (en) | 2019-05-28 |
| CN109818920B CN109818920B (en) | 2022-08-30 |
Family
ID=66602911
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201811528531.2A Active CN109818920B (en) | 2018-12-13 | 2018-12-13 | Mail auditing method and device, computer equipment and computer readable storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN109818920B (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113329016A (en) * | 2021-05-28 | 2021-08-31 | 北京天空卫士网络安全技术有限公司 | Method and device for processing mail |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102082804A (en) * | 2011-03-15 | 2011-06-01 | 合肥华云通信技术有限公司 | Safety check method for preventing emails from divulging secrets in private clouds |
| US20130060863A1 (en) * | 2011-09-01 | 2013-03-07 | John D'ERI | Method and System for Filtering Outgoing Email |
| CN105023137A (en) * | 2015-04-29 | 2015-11-04 | 杭州猿人数据科技有限公司 | E-mail evidence processing system and processing method |
| CN106411690A (en) * | 2016-04-27 | 2017-02-15 | 杭州迪普科技有限公司 | Mail control method and device |
| CN108600081A (en) * | 2018-03-26 | 2018-09-28 | 北京明朝万达科技股份有限公司 | A kind of method and device that mail outgoing achieves, Mail Gateway |
-
2018
- 2018-12-13 CN CN201811528531.2A patent/CN109818920B/en active Active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102082804A (en) * | 2011-03-15 | 2011-06-01 | 合肥华云通信技术有限公司 | Safety check method for preventing emails from divulging secrets in private clouds |
| US20130060863A1 (en) * | 2011-09-01 | 2013-03-07 | John D'ERI | Method and System for Filtering Outgoing Email |
| CN105023137A (en) * | 2015-04-29 | 2015-11-04 | 杭州猿人数据科技有限公司 | E-mail evidence processing system and processing method |
| CN106411690A (en) * | 2016-04-27 | 2017-02-15 | 杭州迪普科技有限公司 | Mail control method and device |
| CN108600081A (en) * | 2018-03-26 | 2018-09-28 | 北京明朝万达科技股份有限公司 | A kind of method and device that mail outgoing achieves, Mail Gateway |
Non-Patent Citations (1)
| Title |
|---|
| 刘娟: ""TurboMail邮件系统功能盘点"", 《计算机与网络》 * |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113329016A (en) * | 2021-05-28 | 2021-08-31 | 北京天空卫士网络安全技术有限公司 | Method and device for processing mail |
Also Published As
| Publication number | Publication date |
|---|---|
| CN109818920B (en) | 2022-08-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9949681B2 (en) | Burnout symptoms detection and prediction | |
| US20190362274A1 (en) | Conformance authority reconciliation | |
| US7475217B2 (en) | Method of managing storage capacity in storage system, a storage device and a computer system | |
| AU2004288591B2 (en) | Framework to enable integration of anti-spam technologies | |
| CN110297912A (en) | Cheat recognition methods, device, equipment and computer readable storage medium | |
| US20120266245A1 (en) | Multi-Nodal Malware Analysis | |
| CN113728581B (en) | System and method for SIEM rule classification and condition execution | |
| CN109685454A (en) | Data checking method, device, equipment and storage medium | |
| JP2011118895A (en) | Method for merging logically associated messages in message queue | |
| US8996632B2 (en) | Managing email disk usage based on user specified conditions | |
| EP3037973A1 (en) | Correlation display system, correlation display method, and correlation display program | |
| CN108563929A (en) | It is a kind of only in the method for concerning security matters Area generation watermark, system, device and medium | |
| US20160299788A1 (en) | Prioritising Event Processing Based on System Workload | |
| US20140025417A1 (en) | Characterizing Time-Bounded Incident Management Systems | |
| US9110722B2 (en) | Data processing work allocation | |
| CN109818920A (en) | Mail checking method, device, computer equipment and computer readable storage medium | |
| CN110502345A (en) | A kind of overload protection method, device, computer equipment and storage medium | |
| CN110012000A (en) | Order detection method, device, computer equipment and storage medium | |
| CN105471938A (en) | Server load management method and server load management device | |
| US20150156132A1 (en) | Determining Available User Interface Functionality Based on Backend Server Load | |
| US20090138479A1 (en) | System and method for sending data storing requests in sequence | |
| US20180123866A1 (en) | Method and apparatus for determining event level of monitoring result | |
| CN115760010A (en) | Examination method of customs declaration form, customs declaration method, device, equipment and storage medium | |
| US20140208439A1 (en) | Injustice detecting system, injustice detecting device and injustice detecting method | |
| US20220342986A1 (en) | Focused image grabbing |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |