JP2018018475A - Preview mail - Google Patents

Abstract

PROBLEM TO BE SOLVED: To allow for checking a mail associated with a cyber-attack for a compressed malicious program attached thereto and a link to a website that causes infection when browsed, without adversely affecting a terminal that received the mail and other devices connected to the terminal.SOLUTION: Upon receipt of an email, a file attached thereto and a URL address of a hyperlink included in the text of the email are referred to (checked) in a computer resource environment within a virtual environment on a network isolated from a network of a terminal that received the email.SELECTED DRAWING: Figure 1

Description

The present invention refers to a file attached when an e-mail is received and a URL address described in the body of the e-mail and linked to a hyperlinked URL in an isolated external execution environment, and only the reference result is electronically stored. It is displayed and confirmed on the terminal that received the mail.

In recent cyber attacks, in addition to sending compressed malware that is commonly seen as an attachment to e-mail, as well as sending a link to a website that becomes infected when viewed Many have been seen.
A malicious program may infect a terminal that received an e-mail and then chain-infect the terminal itself or multiple terminals connected to the company network, creating a suspicious communication path from the infected terminal and attacking (information exploitation). , Information falsification, information destruction).

Recipients of e-mails are cleverly “spoofed” and are actually infected with a malicious program without noticing the e-mail sender's e-mail address, body content, and links to spoofed websites. Many have occurred.
Malicious fraudulent acts that exploit good human wisdom are described in the file attached to the e-mail and in the body of the e-mail, regardless of the individual judgment and circumstances. In this situation, it is inevitable to refer to the hyperlinked URL address.
However, in practice, it is unavoidable that it is unavoidable to refer to a file attached when an e-mail is received and a hyperlinked URL address described in the e-mail body. is there.

As a measure to improve this, a file attached when an e-mail is received in a computer resource environment in a virtual environment in a network separated from the network of the terminal that received the e-mail, and the e-mail body are described. In order to execute the business, it is required to refer to the hyperlinked URL address and display and confirm the execution status and result on the terminal that received the e-mail.
Running in an isolated computer resource environment on a virtual environment in a network that is separate from the network of the terminal that received the email.

Problems to be solved by the invention

The problem to be solved is that the person who receives the e-mail can confirm the contents of the received e-mail without inadvertently encountering a malicious cyber attack.

Means for solving the problem

The main feature of the present invention is that it is executed in an isolated computer resource environment on a virtual environment in a network separated from the network of the terminal that has received the e-mail.

Effect of the invention

No matter how cautious about the malice that goes into human sexism, it's often impossible to find clever tricks by checking for suspicious emails.
Even in that case, it is possible to perform infection-free until the file attached when the e-mail is received and the URL address described in the body of the e-mail and hyperlinked are referred to and confirmed. There is an advantage of being.

The preview email of the present invention is executed in an isolated computer resource environment, so that even if a computer virus such as malware or exploit is lurking, it is sent to the terminal that received the email and the internal network to which the terminal belongs. There is an advantage that it does not adversely affect (infect) connected devices (such as other terminals and shared servers).

The preview mail of the present invention is a hyperlinked URL described in the file attached to the e-mail and the text attached to the e-mail without changing the operability of the e-mail software already introduced and used. There is an advantage that it is possible to refer to the address, and it is not necessary to learn new software operation.

It is a system configuration image of preview mail. Example 1 This is a preview email service provision image. (Example 2)

The isolated computer resource environment was realized by building a virtual environment on the Iaas service in the data center.
In addition, in the case of company-specific ownership, an on-premises isolated computer resource environment was constructed using a network that is not directly connected to the corporate network.

FIG. 1 is a system configuration image diagram of the present invention.

FIG. 2 is an image of service provision according to the present invention.

Claims (4)

  The file attached when the e-mail is received and the hyperlinked URL address in the e-mail body are referenced in an isolated external execution environment, and only the reference result is displayed on the terminal that received the e-mail. Email software that you can check.   Email software that does not infect computer viruses such as malware and exploits when executed in an isolated external execution environment. The virtual execution environment via the isolated external network is executed in a container generated for each reference of a file attached when an email is received and a hyperlinked URL address in the email body, At the end of execution, the execution environment is deleted.
As a result, the virtual execution environment via the isolated external network was used at the end of execution of the reference without affecting the outside of the container even when computer viruses such as malware and exploits existed. E-mail software that protects the virtual execution environment via an isolated external network by erasing the container. A set of resources is provided as a unit of virtual execution environment via an isolated external network that uses Docker container, which is one of container-type virtualization technologies, for email recipients to execute applications. E-mail software used in an independent space.

Images