WO2015196689A1 - Short message filtering method and apparatus - Google Patents

Short message filtering method and apparatus Download PDF

Info

Publication number
WO2015196689A1
WO2015196689A1 PCT/CN2014/090365 CN2014090365W WO2015196689A1 WO 2015196689 A1 WO2015196689 A1 WO 2015196689A1 CN 2014090365 W CN2014090365 W CN 2014090365W WO 2015196689 A1 WO2015196689 A1 WO 2015196689A1
Authority
WO
WIPO (PCT)
Prior art keywords
short message
preset
threshold
content
calling number
Prior art date
Application number
PCT/CN2014/090365
Other languages
French (fr)
Chinese (zh)
Inventor
饶正国
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2015196689A1 publication Critical patent/WO2015196689A1/en

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/12Messaging; Mailboxes; Announcements
    • H04W4/14Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Definitions

  • the present invention relates to the field of mobile communications, and in particular, to a short message filtering method and apparatus.
  • the real-time interception system sets different keyword rules and trigger thresholds according to keyword classification, and the trigger threshold is that the same terminal continuously transmits the same time within a certain period of time.
  • the keyword is given to the monitoring processor, and the monitoring processor can intercept it.
  • different keywords are continuously sent for a period of time. Different keywords represent different spam information to the monitoring processor, and the monitoring processor cannot intercept.
  • the embodiment of the present invention mainly provides a short message filtering method and device.
  • An embodiment of the present invention provides a method for filtering a short message, and the method for filtering a short message based on a short message content score includes the following steps:
  • the embodiment of the present invention further provides a short message filtering device, where the short message filtering device includes: a scoring module, an accumulating module, and a processing module;
  • the scoring module is configured to receive the short message information of the information center, and score the content of the short message information of the corresponding calling number according to the preset content unit score value sample;
  • the accumulating module is configured to accumulate a score value of the content of the short message information of the calling number within a preset statistical time period
  • the processing module is configured to perform a threshold operation corresponding to the preset threshold when the cumulative score of the content of the short message information of the calling number is greater than or equal to a preset threshold.
  • the short message filtering method and device of the embodiment of the present invention scores the content of the short message information of the corresponding calling number according to the preset content unit score value sample; and presets statistics During the time period, the score value of the short message content of the calling number is accumulated; when the accumulated score value of the short message content of the calling number is greater than or equal to the preset threshold, the threshold operation corresponding to the preset threshold is performed.
  • the problem that the same terminal sends spam messages of different types of content cannot be effectively intercepted within a certain period of time.
  • FIG. 1 is a schematic flowchart of a first embodiment of a short message filtering method according to the present invention
  • FIG. 2 is a schematic diagram of a refinement process for scoring short message information in FIG. 1;
  • FIG. 3 is a schematic diagram of functional modules of an embodiment of a short message filtering apparatus according to the present invention.
  • the invention provides a short message filtering method.
  • FIG. 1 is a schematic flowchart diagram of a first embodiment of a short message filtering method according to the present invention.
  • the short message filtering method includes:
  • Step S10 Receive short message information of the information center, and score the content of the short message information of the corresponding calling number according to the preset content unit score value sample;
  • Step S20 accumulating a score value of the content of the short message information of the calling number in the preset statistical time period
  • Step S30 when the cumulative score value of the short message content of the calling number is greater than or equal to the preset threshold, performing a threshold operation corresponding to the preset threshold.
  • the information center receives the short message information of the user terminal, and the user terminal includes a mobile phone, a tablet computer, and the like, and sends the information to the monitoring system for real-time monitoring of the short message information.
  • the monitoring system After receiving the short message information, the monitoring system according to the preset
  • the content unit score value sample scoring the received short message information, and accumulating the score value of the short message information content of the same calling number within a preset statistical time period.
  • the content unit score value sample is generated by the offline content analysis device using sufficiently known spam message content and ordinary short message content, specifically using a Bayesian probability statistical method to extract the ordinary short message of the content unit and the spam text bias.
  • a content unit score value sample is formed, and the content unit score value sample is used to initialize a content scoring module that the user in the monitoring system scores the short message information content.
  • the offline content analysis device may also update the ordinary short message information and the spam short message information according to actual needs, and use the updated ordinary short message information and the spam short message information to refine the ordinary short message bias and the spam short message to form a new content unit score value sample.
  • the content scoring module in the monitoring system is re-initialized with the new content unit scoring value sample, so that the monitoring system can be expanded, and dynamic adjustment can be made according to actual needs.
  • the preset time period is set in various manners, for example, 1.
  • the time when the current short message information is received is used as a starting point, and the subsequent time period is the foregoing preset time period; Divide an hour into 6 time segments, each of which is 10 minutes, and each time period For the above preset time period; adding the score of the other short message information to the current short message information score value to obtain an updated score cumulative value.
  • the threshold information corresponding to the preset threshold is performed on the received short message, and the preset threshold is the intercept threshold. , the interception operation is performed, and the short message information is refused to be sent to the destination user.
  • the threshold value includes the threshold value, the black threshold value, and the suspicious threshold value, and the threshold value for determining the operation of the short message information.
  • the preset threshold value may be set to the foregoing interception. A combination of one or more of a threshold, a black threshold, and a suspect threshold.
  • the corresponding operation may be performed on the short message information according to the following manner: when the cumulative value of the calling number score is greater than or equal to the preset suspicious short message threshold Value, the user of the calling number is set as a suspicious user; when the accumulated value of the calling number score is greater than or equal to the preset intercepting threshold, the current short message information is intercepted, and the short message is rejected and sent to the destination user; when the calling number is scored The accumulated value is greater than or equal to the preset black limit value. The user of the calling number is added to the blacklist and the validity period is set.
  • the embodiment After receiving the short message information of the information center, the embodiment classifies the content of the short message information of the corresponding calling number according to the preset content unit score value sample; and accumulates the calling party within a preset statistical time period.
  • the score value of the content of the short message information of the number when the cumulative score value of the content of the short message information of the calling number is greater than or equal to the preset threshold, the threshold operation corresponding to the preset threshold is performed.
  • FIG. 2 is a schematic diagram of a refinement process for scoring short message information in FIG.
  • step S20 includes:
  • Step S201 Receive short message information sent by the information center through the access gateway, and perform word segmentation processing on the received short message information;
  • Step S202 performing scoring processing on each participle after the word segmentation process, and accumulating the word segmentation The score of the short message information is obtained.
  • the first message processing is performed on the received short message information, and then each word segmentation processed by the word segmentation is scored, and the scores of the respective word segments are accumulated to obtain the short message information.
  • the score value and further preferably, according to the set basic score threshold value, determining whether the content of the current short message information is valuable according to the current score value, if the value is continued, otherwise setting the current short message record status to release, and finally executing The result is release; the basic score threshold set in it is mainly used to filter out some small value-free SMS content records, and avoid excessive accumulation leading to false monitoring. Further, if the content score of the current short message information is valuable, the cumulative score value of the short message information content of the calling number is obtained.
  • the accumulated score value of the recorded short message information content is 0; and the accumulated score value is obtained. It needs to be determined according to the preset time period. If the preset time period is exceeded, the accumulated score value of the current user's short message information content is 0. Update the SMS record to record the cumulative score of the calling user, save it, and use the current new score cumulative value to compare with the preset threshold; if it is less than the preset threshold, set the SMS record status to Release, the final execution result is release; if it is greater than or equal to the preset threshold, it will be intercepted according to the set action, set the state, and the final execution result is interception; the preset threshold comparison process can set various thresholds. And set the SMS record status according to the action corresponding to the threshold value, such as adding a black threshold and action.
  • the false monitoring caused by the possible worthless short message information is filtered, and on the one hand, the cumulative score of the present invention is more scientific and reasonable, and on the other hand, the processing speed is also accelerated.
  • the monitoring system has higher processing efficiency.
  • the invention also provides a short message filtering device.
  • FIG. 3 is a schematic diagram of functional modules of an SMS filtering device according to an embodiment of the present invention.
  • the short message filtering device includes:
  • the scoring module 10 can be implemented by the receiver, configured to receive the short message information of the information center, and perform the content of the short message information of the corresponding calling number according to the preset content unit score value sample. score;
  • the accumulating module 20 may be implemented by a memory, and configured to accumulate a score value of the short message information content of the calling number within a preset statistical time period;
  • the processing module 30 may be implemented by the processor, and configured to perform a threshold operation corresponding to the preset threshold when the cumulative score value of the short message content of the calling number is greater than or equal to a preset threshold.
  • the information center receives the short message information of the user terminal, and the user terminal includes a mobile phone, a tablet computer, and the like, and sends the information to the monitoring system for real-time monitoring of the short message information.
  • the scoring module 10 The scoring operation is performed on the received short message information according to the preset content unit score value sample, and the accumulating module 20 accumulates the score value of the short message information content of the same calling number within the preset statistical time period.
  • the content unit score value sample is generated by the offline content analysis device using sufficiently known spam message content and ordinary short message content, specifically using a Bayesian probability statistical method to extract the ordinary short message of the content unit and the spam text bias.
  • a content unit score value sample is formed, and the content unit score value sample is used to initialize a content scoring module that the user in the monitoring system scores the short message information content.
  • the offline content analysis device may also update the ordinary short message information and the spam short message information according to actual needs, and use the updated ordinary short message information and the spam short message information to refine the ordinary short message bias and the spam short message to form a new content unit score value sample.
  • the content scoring module in the monitoring system is re-initialized with the new content unit scoring value sample, so that the monitoring system can be expanded, and dynamic adjustment can be made according to actual needs.
  • the preset time period is set in various manners, for example, 1.
  • the time when the current short message information is received is used as a starting point, and the subsequent time period is the foregoing preset time period; Divide an hour into 6 time segments, each of which is 10 minutes, and each time period is the above-mentioned preset time period; add the score of the other short message information to the current short message information score value to obtain an update.
  • the cumulative value of the score When the accumulated score value of the content of the short message information of the calling number is greater than or equal to the preset threshold, the processing module 30 performs the received short message information. Threshold operation corresponding to the preset threshold.
  • the threshold value includes the threshold value, the black threshold value, and the suspicious threshold value, and the threshold value for determining the operation of the short message information.
  • the preset threshold value may be set to the foregoing interception. A combination of one or more of a threshold, a black threshold, and a suspect threshold.
  • the corresponding operation may be performed on the short message information according to the following manner: when the cumulative value of the calling number score is greater than or equal to the preset suspicious short message threshold Value, the user of the calling number is set as a suspicious user; when the accumulated value of the calling number score is greater than or equal to the preset intercepting threshold, the current short message information is intercepted, and the short message is rejected and sent to the destination user; when the calling number is scored The accumulated value is greater than or equal to the preset black limit value. The user of the calling number is added to the blacklist and the validity period is set.
  • the embodiment After receiving the short message information of the information center, the embodiment classifies the content of the short message information of the corresponding calling number according to the preset content unit score value sample; and accumulates the calling party within a preset statistical time period.
  • the score value of the content of the short message information of the number when the cumulative score value of the content of the short message information of the calling number is greater than or equal to the preset threshold, the threshold operation corresponding to the preset threshold is performed.
  • the scoring module 10 is specifically configured to:
  • the receiving information center performs the word segmentation processing on the received short message information by using the short message information transmitted by the access gateway;
  • the scoring module 10 After receiving the short message information transmitted by the information center through the access gateway, the scoring module 10 first performs segmentation processing on the received short message information, and then scores each word segmentation processed by the word segmentation, and accumulates the scores of the respective word segments to obtain the scores of the respective word segments.
  • the rating value of the short message information and then preferred,
  • the set basic score threshold value according to the current score value, it is determined whether the content of the current short message information has value, if it has value, then continue, otherwise the current short message record status is set to release, and the final execution result is release;
  • the basic scoring threshold is set to filter out some of the valuable non-valued SMS content records, and avoid excessive accumulation leading to false monitoring.
  • the cumulative score value of the short message information content of the calling number is obtained. At this time, if it is a new user, the accumulated score value of the recorded short message information content is 0; and the accumulated score value is obtained. It needs to be determined according to the preset time period. If the preset time period is exceeded, the accumulated score value of the current user's short message information content is 0.
  • the false monitoring caused by the possible valueless short message information is filtered, and on the one hand, the cumulative score of the present invention is more scientific and reasonable, and on the other hand, the processing speed is also accelerated. This makes the monitoring system more efficient.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Information Transfer Between Computers (AREA)
  • Telephonic Communication Services (AREA)

Abstract

Disclosed is a short message filtering method. The method comprises the following steps: receiving short message information of an information center, and rating the content of short message information of a corresponding calling number according to a preset content unit rating value sample; accumulating rating values of the content of short message information of the calling number in a preset statistical time period; and when an accumulated rating value of the content of the short message information of the calling number is greater than or equal to a preset threshold value, performing a threshold operation corresponding to the preset threshold value. Also disclosed is a short message filtering apparatus.

Description

短信过滤方法和装置SMS filtering method and device 技术领域Technical field
本发明涉及移动通信领域,尤其涉及一种短信过滤方法和装置。The present invention relates to the field of mobile communications, and in particular, to a short message filtering method and apparatus.
背景技术Background technique
目前,大多数运营商使用的是基于关键字的实时拦截系统,此实时拦截系统依据关键字分类设置不同的关键字规则和触发门限,而触发门限为同一终端在一段时间内,连续发送相同的关键字给监控处理机,监控处理机才能予以拦截,对于同一终端在一段时间内,连续发送不同的关键字,不同的关键字代表不同的垃圾信息给监控处理机,监控处理机不能进行拦截,针对此问题,急需寻求一种技术方案解决同一终端在一段时间内,发送不同的垃圾信息,监控处理机不能进行拦截的问题。At present, most operators use a keyword-based real-time interception system. The real-time interception system sets different keyword rules and trigger thresholds according to keyword classification, and the trigger threshold is that the same terminal continuously transmits the same time within a certain period of time. The keyword is given to the monitoring processor, and the monitoring processor can intercept it. For the same terminal, different keywords are continuously sent for a period of time. Different keywords represent different spam information to the monitoring processor, and the monitoring processor cannot intercept. In response to this problem, it is urgent to seek a technical solution to solve the problem that the same terminal transmits different garbage information within a certain period of time, and the monitoring processor cannot intercept.
上述内容仅用于辅助理解本发明的技术方案,并不代表承认上述内容是现有技术。The above content is only used to assist in understanding the technical solutions of the present invention, and does not constitute an admission that the above is prior art.
发明内容Summary of the invention
为解决同一终端在一段时间内,发送不同的垃圾信息,监控处理机不能进行拦截的问题,本发明实施例主要期望提供一种短信过滤方法和装置。In order to solve the problem that the same terminal sends different garbage information and the monitoring processor cannot perform the interception, the embodiment of the present invention mainly provides a short message filtering method and device.
本发明实施例提供一种过滤短信方法,所述基于短信内容评分过滤短信方法,包括以下步骤:An embodiment of the present invention provides a method for filtering a short message, and the method for filtering a short message based on a short message content score includes the following steps:
接收信息中心的短信信息,根据预设的内容单元评分值样本对相应的主叫号码的短信信息的内容进行评分;Receiving the short message information of the information center, and scoring the content of the short message information of the corresponding calling number according to the preset content unit score value sample;
在预设的统计时间段内,累计对所述主叫号码的短信信息内容的评分值; Accumulating a score value of the content of the short message information of the calling number in a preset statistical time period;
当所述主叫号码的短信信息内容的累计评分值大于等于预设门限值时,执行与预设门限值对应的门限操作。When the accumulated score value of the short message content of the calling number is greater than or equal to a preset threshold, performing a threshold operation corresponding to the preset threshold.
此外,本发明实施例还提供一种短信过滤装置,所述短信过滤装置包括:评分模块、累计模块、处理模块;其中,In addition, the embodiment of the present invention further provides a short message filtering device, where the short message filtering device includes: a scoring module, an accumulating module, and a processing module;
评分模块,配置为接收信息中心的短信信息,根据预设的内容单元评分值样本对相应的主叫号码的短信信息的内容进行评分;The scoring module is configured to receive the short message information of the information center, and score the content of the short message information of the corresponding calling number according to the preset content unit score value sample;
累计模块,配置为在预设的统计时间段内,累计对所述主叫号码的短信信息内容的评分值;The accumulating module is configured to accumulate a score value of the content of the short message information of the calling number within a preset statistical time period;
处理模块,配置为当所述主叫号码的短信信息内容的累计评分值大于等于预设门限值时,执行与预设门限值对应的门限操作。The processing module is configured to perform a threshold operation corresponding to the preset threshold when the cumulative score of the content of the short message information of the calling number is greater than or equal to a preset threshold.
本发明实施例的短信过滤方法和装置,在接收到信息中心的短信信息后,根据预设的内容单元评分值样本对相应的主叫号码的短信信息的内容进行评分;并在预设的统计时间段内,累计对主叫号码的短信信息内容的评分值;当主叫号码的短信信息内容的累计评分值大于等于预设门限值时,执行与预设门限值对应的门限操作。解决了同一终端在一段时间内,发送不同类型内容的垃圾短信不能予以有效拦截的问题。After receiving the short message information of the information center, the short message filtering method and device of the embodiment of the present invention scores the content of the short message information of the corresponding calling number according to the preset content unit score value sample; and presets statistics During the time period, the score value of the short message content of the calling number is accumulated; when the accumulated score value of the short message content of the calling number is greater than or equal to the preset threshold, the threshold operation corresponding to the preset threshold is performed. The problem that the same terminal sends spam messages of different types of content cannot be effectively intercepted within a certain period of time.
附图说明DRAWINGS
图1为本发明短信过滤方法第一实施例的流程示意图;1 is a schematic flowchart of a first embodiment of a short message filtering method according to the present invention;
图2为图1中对短信信息进行评分的细化流程示意图;2 is a schematic diagram of a refinement process for scoring short message information in FIG. 1;
图3为本发明短信过滤装置一实施例的功能模块示意图。FIG. 3 is a schematic diagram of functional modules of an embodiment of a short message filtering apparatus according to the present invention.
具体实施方式detailed description
应当理解,此处所描述的具体实施例仅仅用以解释本发明,并不用于限定本发明。It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.
本发明提供一种短信过滤方法。 The invention provides a short message filtering method.
参照图1,图1为本发明短信过滤方法第一实施例的流程示意图。Referring to FIG. 1, FIG. 1 is a schematic flowchart diagram of a first embodiment of a short message filtering method according to the present invention.
在一实施例中,该短信过滤方法包括:In an embodiment, the short message filtering method includes:
步骤S10,接收信息中心的短信信息,根据预设的内容单元评分值样本对相应的主叫号码的短信信息的内容进行评分;Step S10: Receive short message information of the information center, and score the content of the short message information of the corresponding calling number according to the preset content unit score value sample;
步骤S20,在预设的统计时间段内,累计对主叫号码的短信信息内容的评分值;Step S20: accumulating a score value of the content of the short message information of the calling number in the preset statistical time period;
步骤S30,当主叫号码的短信信息内容的累计评分值大于等于预设门限值时,执行与预设门限值对应的门限操作。Step S30, when the cumulative score value of the short message content of the calling number is greater than or equal to the preset threshold, performing a threshold operation corresponding to the preset threshold.
信息中心接收用户终端的短信信息,所述用户终端包括手机、平板电脑等;并将其下发给用于对短信信息进行实时监控的监控系统,该监控系统接收到短信信息后,根据预设的内容单元评分值样本对接收到的短信信息进行评分操作,并在预设的统计时间段内,累计对同一主叫号码的短信信息内容的评分值。内容单元评分值样本是由离线内容分析装置使用足够已知的垃圾短信内容和普通短信内容所产生,具体为采用贝叶斯概率统计方法,将内容单元的普通短信偏向与垃圾短信偏向提炼出来,形成内容单元评分值样本,并且采用该内容单元评分值样本对监控系统中用户对短信信息内容进行评分的内容评分模块进行初始化。离线内容分析装置还可以根据实际需要,将普通短信信息和垃圾短信信息进行更新,并利用更新后的普通短信信息和垃圾短信信息提炼普通短信偏向与垃圾短信偏向,形成新的内容单元评分值样本,然后利用新的内容单元评分值样本再次初始化监控系统中的内容评分模块,以使得监控系统能够进行扩展,也能根据实际需要做出动态的调整。The information center receives the short message information of the user terminal, and the user terminal includes a mobile phone, a tablet computer, and the like, and sends the information to the monitoring system for real-time monitoring of the short message information. After receiving the short message information, the monitoring system according to the preset The content unit score value sample scoring the received short message information, and accumulating the score value of the short message information content of the same calling number within a preset statistical time period. The content unit score value sample is generated by the offline content analysis device using sufficiently known spam message content and ordinary short message content, specifically using a Bayesian probability statistical method to extract the ordinary short message of the content unit and the spam text bias. A content unit score value sample is formed, and the content unit score value sample is used to initialize a content scoring module that the user in the monitoring system scores the short message information content. The offline content analysis device may also update the ordinary short message information and the spam short message information according to actual needs, and use the updated ordinary short message information and the spam short message information to refine the ordinary short message bias and the spam short message to form a new content unit score value sample. Then, the content scoring module in the monitoring system is re-initialized with the new content unit scoring value sample, so that the monitoring system can be expanded, and dynamic adjustment can be made according to actual needs.
本实施例中,所述预设时间段,其设定的方式有多种,譬如:1、接收到当前短信信息的时间作为起始点,之后的一段时间为上述的预设时间段;2、将一个小时划分为6个时间段,每一个小段为10分钟,且每一时间段 为上述的预设时间段;将其他短信信息的评分累计值加上当前的短信信息评分值,获得一个更新的评分累计值。当主叫号码的短信信息内容的累计评分值大于等于预设门限值时,对接收到的短信信息执行与预设门限值对应的门限操作,如预设门限值为拦截门限值,则执行拦截操作,拒绝将此短信信息发送给目的用户。预设门限值包括拦截门限值、加黑门限值和可疑门限值等用于判断对短信信息执行相应操作的门限值,本实施例中预设门限值可设置为上述拦截门限值、加黑门限值和可疑门限值中的一种或者几者的组合。In this embodiment, the preset time period is set in various manners, for example, 1. The time when the current short message information is received is used as a starting point, and the subsequent time period is the foregoing preset time period; Divide an hour into 6 time segments, each of which is 10 minutes, and each time period For the above preset time period; adding the score of the other short message information to the current short message information score value to obtain an updated score cumulative value. When the cumulative score of the content of the short message of the calling number is greater than or equal to the preset threshold, the threshold information corresponding to the preset threshold is performed on the received short message, and the preset threshold is the intercept threshold. , the interception operation is performed, and the short message information is refused to be sent to the destination user. The threshold value includes the threshold value, the black threshold value, and the suspicious threshold value, and the threshold value for determining the operation of the short message information. In this embodiment, the preset threshold value may be set to the foregoing interception. A combination of one or more of a threshold, a black threshold, and a suspect threshold.
当主叫号码的短信信息内容的累计评分值大于等于预设门限值时,具体可根据以下方式对短信信息执行相应的操作:当主叫号码评分的累计值大于等于预设可疑短信门限值,将主叫号码的用户设置为可疑用户;当主叫号码评分的累计值大于等于预设拦截门限值,拦截当前短信信息,拒绝将此短信信息发送给目的用户;当主叫号码评分的累计值大于等于预设加黑门限值,将主叫号码的用户加入黑名单,并设置有效期。When the accumulated score value of the short message content of the calling number is greater than or equal to the preset threshold, the corresponding operation may be performed on the short message information according to the following manner: when the cumulative value of the calling number score is greater than or equal to the preset suspicious short message threshold Value, the user of the calling number is set as a suspicious user; when the accumulated value of the calling number score is greater than or equal to the preset intercepting threshold, the current short message information is intercepted, and the short message is rejected and sent to the destination user; when the calling number is scored The accumulated value is greater than or equal to the preset black limit value. The user of the calling number is added to the blacklist and the validity period is set.
本实施例在接收到信息中心的短信信息后,根据预设的内容单元评分值样本对相应的主叫号码的短信信息的内容进行评分;并在预设的统计时间段内,累计对主叫号码的短信信息内容的评分值;当主叫号码的短信信息内容的累计评分值大于等于预设门限值时,执行与预设门限值对应的门限操作。解决了同一终端在一段时间内,发送不同类型内容的垃圾短信不能予以有效拦截的问题。After receiving the short message information of the information center, the embodiment classifies the content of the short message information of the corresponding calling number according to the preset content unit score value sample; and accumulates the calling party within a preset statistical time period. The score value of the content of the short message information of the number; when the cumulative score value of the content of the short message information of the calling number is greater than or equal to the preset threshold, the threshold operation corresponding to the preset threshold is performed. The problem that the same terminal sends spam messages of different types of content cannot be effectively intercepted within a certain period of time.
参见图2,图2为图1中的对短信信息进行评分的细化流程示意图。Referring to FIG. 2, FIG. 2 is a schematic diagram of a refinement process for scoring short message information in FIG.
优选地,步骤S20包括:Preferably, step S20 includes:
步骤S201,接收信息中心通过接入网关传送的短信信息,对接收到的短信信息进行分词处理;Step S201: Receive short message information sent by the information center through the access gateway, and perform word segmentation processing on the received short message information;
步骤S202,对分词处理后的每一个分词进行评分处理,累计分词的评 分得到短信信息的评分值。Step S202, performing scoring processing on each participle after the word segmentation process, and accumulating the word segmentation The score of the short message information is obtained.
接收到信息中心通过接入网关传送的短信信息后,首先对接收到的短信信息进行分词处理,然后,对分词处理后的每一个分词进行评分处理,并累计各个分词的评分进而得到短信信息的评分值,再优选,依据所设定的基础评分门限值,依据当前评分值确定当前的短信信息的内容是否有价值,若有价值则继续,否则设定当前短信记录状态为放行,最终执行结果为放行;其中所设置的基础评分门限值,主要用于滤除一些认为微小的无价值短信内容记录,避免过多的累计导致误监控。再优选,若当前的短信信息的内容评分有价值,则获取主叫号码的短信信息内容的累计评分值,此时,若是新用户则记录短信信息内容的累计评分值为0;获取累计评分值需要依据预设时间段来确定,超出预设时间段的则当前用户短信信息内容的累计评分值为0。更新短信记录主叫用户的累计评分值,并保存,并使用当前的新的评分累计值与所设定的预设门限值进行比较;小于预设门限值的,设定短信记录状态为放行,最终执行结果为放行;大于等于预设门限值的,则依据所设定的动作拦截,设置状态,最终执行结果为拦截;预设门限值比较过程可设置多种门限值,并依据门限值对应的动作设置短信记录状态,如新增一种加黑门限值及动作。After receiving the short message information transmitted by the information center through the access gateway, the first message processing is performed on the received short message information, and then each word segmentation processed by the word segmentation is scored, and the scores of the respective word segments are accumulated to obtain the short message information. The score value, and further preferably, according to the set basic score threshold value, determining whether the content of the current short message information is valuable according to the current score value, if the value is continued, otherwise setting the current short message record status to release, and finally executing The result is release; the basic score threshold set in it is mainly used to filter out some small value-free SMS content records, and avoid excessive accumulation leading to false monitoring. Further, if the content score of the current short message information is valuable, the cumulative score value of the short message information content of the calling number is obtained. At this time, if it is a new user, the accumulated score value of the recorded short message information content is 0; and the accumulated score value is obtained. It needs to be determined according to the preset time period. If the preset time period is exceeded, the accumulated score value of the current user's short message information content is 0. Update the SMS record to record the cumulative score of the calling user, save it, and use the current new score cumulative value to compare with the preset threshold; if it is less than the preset threshold, set the SMS record status to Release, the final execution result is release; if it is greater than or equal to the preset threshold, it will be intercepted according to the set action, set the state, and the final execution result is interception; the preset threshold comparison process can set various thresholds. And set the SMS record status according to the action corresponding to the threshold value, such as adding a black threshold and action.
本实施例中通过设定预设基础评分值,过滤了可能存在的无价值短信信息导致的误监控,一方面使得本发明获得累计评分更加的科学合理,另一方面,也加快了处理速度,使得监控系统具有更高的处理效率。In this embodiment, by setting a preset basic score value, the false monitoring caused by the possible worthless short message information is filtered, and on the one hand, the cumulative score of the present invention is more scientific and reasonable, and on the other hand, the processing speed is also accelerated. The monitoring system has higher processing efficiency.
本发明还提供一种短信过滤装置。The invention also provides a short message filtering device.
参照图3,图3为本发明短信过滤装置一实施例的功能模块示意图。Referring to FIG. 3, FIG. 3 is a schematic diagram of functional modules of an SMS filtering device according to an embodiment of the present invention.
在一实施例中,该短信过滤装置包括:In an embodiment, the short message filtering device includes:
评分模块10,可以由接收器实现,配置为接收信息中心的短信信息,根据预设的内容单元评分值样本对相应的主叫号码的短信信息的内容进行 评分;The scoring module 10 can be implemented by the receiver, configured to receive the short message information of the information center, and perform the content of the short message information of the corresponding calling number according to the preset content unit score value sample. score;
累计模块20,可以由存储器实现,配置为在预设的统计时间段内,累计对主叫号码的短信信息内容的评分值;The accumulating module 20 may be implemented by a memory, and configured to accumulate a score value of the short message information content of the calling number within a preset statistical time period;
处理模块30,可以由处理器实现,配置为当主叫号码的短信信息内容的累计评分值大于等于预设门限值时,执行与预设门限值对应的门限操作。The processing module 30 may be implemented by the processor, and configured to perform a threshold operation corresponding to the preset threshold when the cumulative score value of the short message content of the calling number is greater than or equal to a preset threshold.
信息中心接收用户终端的短信信息,所述用户终端包括手机、平板电脑等;并将其下发给用于对短信信息进行实时监控的监控系统,该监控系统接收到短信信息后,评分模块10根据预设的内容单元评分值样本对接收到的短信信息进行评分操作,累计模块20在预设的统计时间段内,累计对同一主叫号码的短信信息内容的评分值。内容单元评分值样本是由离线内容分析装置使用足够已知的垃圾短信内容和普通短信内容所产生,具体为采用贝叶斯概率统计方法,将内容单元的普通短信偏向与垃圾短信偏向提炼出来,形成内容单元评分值样本,并且采用该内容单元评分值样本对监控系统中用户对短信信息内容进行评分的内容评分模块进行初始化。离线内容分析装置还可以根据实际需要,将普通短信信息和垃圾短信信息进行更新,并利用更新后的普通短信信息和垃圾短信信息提炼普通短信偏向与垃圾短信偏向,形成新的内容单元评分值样本,然后利用新的内容单元评分值样本再次初始化监控系统中的内容评分模块,以使得监控系统能够进行扩展,也能根据实际需要做出动态的调整。The information center receives the short message information of the user terminal, and the user terminal includes a mobile phone, a tablet computer, and the like, and sends the information to the monitoring system for real-time monitoring of the short message information. After the monitoring system receives the short message information, the scoring module 10 The scoring operation is performed on the received short message information according to the preset content unit score value sample, and the accumulating module 20 accumulates the score value of the short message information content of the same calling number within the preset statistical time period. The content unit score value sample is generated by the offline content analysis device using sufficiently known spam message content and ordinary short message content, specifically using a Bayesian probability statistical method to extract the ordinary short message of the content unit and the spam text bias. A content unit score value sample is formed, and the content unit score value sample is used to initialize a content scoring module that the user in the monitoring system scores the short message information content. The offline content analysis device may also update the ordinary short message information and the spam short message information according to actual needs, and use the updated ordinary short message information and the spam short message information to refine the ordinary short message bias and the spam short message to form a new content unit score value sample. Then, the content scoring module in the monitoring system is re-initialized with the new content unit scoring value sample, so that the monitoring system can be expanded, and dynamic adjustment can be made according to actual needs.
本实施例中,所述预设时间段,其设定的方式有多种,譬如:1、接收到当前短信信息的时间作为起始点,之后的一段时间为上述的预设时间段;2、将一个小时划分为6个时间段,每一个小段为10分钟,且每一时间段为上述的预设时间段;将其他短信信息的评分累计值加上当前的短信信息评分值,获得一个更新的评分累计值。当主叫号码的短信信息内容的累计评分值大于等于预设门限值时,通过处理模块30对接收到的短信信息执行 与预设门限值对应的门限操作,如预设门限值为拦截门限值,则执行拦截操作,拒绝将此短信信息发送给目的用户。预设门限值包括拦截门限值、加黑门限值和可疑门限值等用于判断对短信信息执行相应操作的门限值,本实施例中预设门限值可设置为上述拦截门限值、加黑门限值和可疑门限值中的一种或者几者的组合。In this embodiment, the preset time period is set in various manners, for example, 1. The time when the current short message information is received is used as a starting point, and the subsequent time period is the foregoing preset time period; Divide an hour into 6 time segments, each of which is 10 minutes, and each time period is the above-mentioned preset time period; add the score of the other short message information to the current short message information score value to obtain an update. The cumulative value of the score. When the accumulated score value of the content of the short message information of the calling number is greater than or equal to the preset threshold, the processing module 30 performs the received short message information. Threshold operation corresponding to the preset threshold. If the preset threshold is the intercept threshold, the interception operation is performed, and the short message is rejected from being sent to the destination user. The threshold value includes the threshold value, the black threshold value, and the suspicious threshold value, and the threshold value for determining the operation of the short message information. In this embodiment, the preset threshold value may be set to the foregoing interception. A combination of one or more of a threshold, a black threshold, and a suspect threshold.
当主叫号码的短信信息内容的累计评分值大于等于预设门限值时,具体可根据以下方式对短信信息执行相应的操作:当主叫号码评分的累计值大于等于预设可疑短信门限值,将主叫号码的用户设置为可疑用户;当主叫号码评分的累计值大于等于预设拦截门限值,拦截当前短信信息,拒绝将此短信信息发送给目的用户;当主叫号码评分的累计值大于等于预设加黑门限值,将主叫号码的用户加入黑名单,并设置有效期。When the accumulated score value of the short message content of the calling number is greater than or equal to the preset threshold, the corresponding operation may be performed on the short message information according to the following manner: when the cumulative value of the calling number score is greater than or equal to the preset suspicious short message threshold Value, the user of the calling number is set as a suspicious user; when the accumulated value of the calling number score is greater than or equal to the preset intercepting threshold, the current short message information is intercepted, and the short message is rejected and sent to the destination user; when the calling number is scored The accumulated value is greater than or equal to the preset black limit value. The user of the calling number is added to the blacklist and the validity period is set.
本实施例在接收到信息中心的短信信息后,根据预设的内容单元评分值样本对相应的主叫号码的短信信息的内容进行评分;并在预设的统计时间段内,累计对主叫号码的短信信息内容的评分值;当主叫号码的短信信息内容的累计评分值大于等于预设门限值时,执行与预设门限值对应的门限操作。解决了同一终端在一段时间内,发送不同类型内容的垃圾短信不能予以有效拦截的问题。After receiving the short message information of the information center, the embodiment classifies the content of the short message information of the corresponding calling number according to the preset content unit score value sample; and accumulates the calling party within a preset statistical time period. The score value of the content of the short message information of the number; when the cumulative score value of the content of the short message information of the calling number is greater than or equal to the preset threshold, the threshold operation corresponding to the preset threshold is performed. The problem that the same terminal sends spam messages of different types of content cannot be effectively intercepted within a certain period of time.
优选地,评分模块10具体配置为:Preferably, the scoring module 10 is specifically configured to:
接收信息中心通过接入网关传送的短信信息,对接收到的短信信息进行分词处理;The receiving information center performs the word segmentation processing on the received short message information by using the short message information transmitted by the access gateway;
对分词处理后的每一个分词进行评分处理,累计分词的评分得到短信信息的评分值。Each participle after the word segmentation is scored, and the score of the accumulated participle is scored by the short message information.
接收到信息中心通过接入网关传送的短信信息后,评分模块10首先对接收到的短信信息进行分词处理,然后,对分词处理后的每一个分词进行评分处理,并累计各个分词的评分进而得到短信信息的评分值,再优选, 依据所设定的基础评分门限值,依据当前评分值确定当前的短信信息的内容是否有价值,若有价值则继续,否则设定当前短信记录状态为放行,最终执行结果为放行;其中所设置的基础评分门限值,主要用于滤除一些认为微小的无价值短信内容记录,避免过多的累计导致误监控。再优选,若当前的短信信息的内容评分有价值,则获取主叫号码的短信信息内容的累计评分值,此时,若是新用户则记录短信信息内容的累计评分值为0;获取累计评分值需要依据预设时间段来确定,超出预设时间段的则当前用户短信信息内容的累计评分值为0。更新短信记录主叫用户的累计评分值,并保存,并使用当前的新的评分累计值与所设定的预设门限值进行比较;小于预设门限值的,设定短信记录状态为放行,最终执行结果为放行;大于等于预设门限值的,则依据所设定的动作拦截,设置状态,最终执行结果为拦截;预设门限值比较过程可设置多种门限值,并依据门限值对应的动作设置短信记录状态,如新增一种加黑门限值及动作。After receiving the short message information transmitted by the information center through the access gateway, the scoring module 10 first performs segmentation processing on the received short message information, and then scores each word segmentation processed by the word segmentation, and accumulates the scores of the respective word segments to obtain the scores of the respective word segments. The rating value of the short message information, and then preferred, According to the set basic score threshold value, according to the current score value, it is determined whether the content of the current short message information has value, if it has value, then continue, otherwise the current short message record status is set to release, and the final execution result is release; The basic scoring threshold is set to filter out some of the valuable non-valued SMS content records, and avoid excessive accumulation leading to false monitoring. Further, if the content score of the current short message information is valuable, the cumulative score value of the short message information content of the calling number is obtained. At this time, if it is a new user, the accumulated score value of the recorded short message information content is 0; and the accumulated score value is obtained. It needs to be determined according to the preset time period. If the preset time period is exceeded, the accumulated score value of the current user's short message information content is 0. Update the SMS record to record the cumulative score of the calling user, save it, and use the current new score cumulative value to compare with the preset threshold; if it is less than the preset threshold, set the SMS record status to Release, the final execution result is release; if it is greater than or equal to the preset threshold, it will be intercepted according to the set action, set the state, and the final execution result is interception; the preset threshold comparison process can set various thresholds. And set the SMS record status according to the action corresponding to the threshold value, such as adding a black threshold and action.
以上仅为本发明的优选实施例,并非因此限制本发明的专利范围,凡是利用本发明说明书及附图内容所作的等效结构或等效流程变换,或直接或间接运用在其他相关的技术领域,均同理包括在本发明的专利保护范围内。The above are only the preferred embodiments of the present invention, and are not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformations made by the description of the present invention and the drawings are directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of the present invention.
工业实用性Industrial applicability
本发明实施例中通过设定预设基础评分值,过滤了可能存在的无价值短信信息导致的误监控,一方面使得本发明获得累计评分更加的科学合理,另一方面,也加快了处理速度,使得监控系统具有更高的处理效率。 In the embodiment of the present invention, by setting a preset basic score value, the false monitoring caused by the possible valueless short message information is filtered, and on the one hand, the cumulative score of the present invention is more scientific and reasonable, and on the other hand, the processing speed is also accelerated. This makes the monitoring system more efficient.

Claims (10)

  1. 一种短信过滤方法,所述方法基于短信内容评分进行短信过滤,包括以下步骤:A short message filtering method, where the method performs short message filtering based on a short message content rating, including the following steps:
    接收信息中心的短信信息,根据预设的内容单元评分值样本对相应的主叫号码的短信信息的内容进行评分;Receiving the short message information of the information center, and scoring the content of the short message information of the corresponding calling number according to the preset content unit score value sample;
    在预设的统计时间段内,累计对所述主叫号码的短信信息内容的评分值;Accumulating a score value of the content of the short message information of the calling number in a preset statistical time period;
    当所述主叫号码的短信信息内容的累计评分值大于等于预设门限值时,执行与预设门限值对应的门限操作。When the accumulated score value of the short message content of the calling number is greater than or equal to a preset threshold, performing a threshold operation corresponding to the preset threshold.
  2. 如权利要求1所述的短信过滤方法,其中,所述内容单元评分值样本为根据已知的垃圾短信内容和普通短信内容生成。The short message filtering method according to claim 1, wherein the content unit score value sample is generated based on known spam message content and normal short message content.
  3. 如权利要求1所述的短信过滤方法,其中,所述接收信息中心的短信信息,根据预设的内容单元评分值样本对相应的主叫号码的短信信息的内容进行评分的步骤包括:The short message filtering method according to claim 1, wherein the step of receiving the short message information of the information center and scoring the content of the short message information of the corresponding calling number according to the preset content unit score value sample comprises:
    接收信息中心通过接入网关传送的短信信息,对接收到的短信信息进行分词处理;The receiving information center performs the word segmentation processing on the received short message information by using the short message information transmitted by the access gateway;
    对分词处理后的每一个分词进行评分处理,累计分词的评分得到所述短信信息的评分值。Each participle after the word segmentation is scored, and the score of the accumulated participle obtains the score value of the short message information.
  4. 如权利要求1所述的短信过滤方法,其中,所述预设门限值至少包括以下之一:预设拦截门限值、预设加黑门限值、预设可疑短信门限值。The short message filtering method according to claim 1, wherein the preset threshold value comprises at least one of the following: a preset intercept threshold, a preset black threshold, and a preset suspicious short message threshold.
  5. 如权利要求4所述的短信过滤方法,其中,所述当发送方的评分累计值大于等于预设门限值时,所述监控处理机执行与预设门限值对应的门限操作,对发送方行为进行处置的步骤包括:The short message filtering method according to claim 4, wherein when the cumulative value of the score of the sender is greater than or equal to a preset threshold, the monitoring processor performs a threshold operation corresponding to the preset threshold, and sends the threshold The steps of the party behavior to be disposed of include:
    当所述主叫号码评分的累计值大于等于预设可疑短信门限值,将所述主叫号码的用户设置为可疑用户; When the accumulated value of the calling number score is greater than or equal to the preset suspicious short message threshold, the user of the calling number is set as a suspicious user;
    当所述主叫号码评分的累计值大于等于预设拦截门限值,拦截当前短信信息,拒绝将此短信信息发送给目的用户;When the accumulated value of the calling number score is greater than or equal to a preset intercept threshold, intercepting the current short message information, and refusing to send the short message information to the destination user;
    当所述主叫号码评分的累计值大于等于预设加黑门限值,将所述主叫号码的用户加入黑名单,并设置有效期。When the accumulated value of the calling number score is greater than or equal to the preset blackening threshold, the user of the calling number is added to the blacklist, and the validity period is set.
  6. 一种短信过滤装置,所述短信过滤装置包括:评分模块、累计模块、处理模块;其中,A short message filtering device, the short message filtering device includes: a scoring module, an accumulating module, and a processing module; wherein
    评分模块,配置为接收信息中心的短信信息,根据预设的内容单元评分值样本对相应的主叫号码的短信信息的内容进行评分;The scoring module is configured to receive the short message information of the information center, and score the content of the short message information of the corresponding calling number according to the preset content unit score value sample;
    累计模块,配置为在预设的统计时间段内,累计对所述主叫号码的短信信息内容的评分值;The accumulating module is configured to accumulate a score value of the content of the short message information of the calling number within a preset statistical time period;
    处理模块,配置为当所述主叫号码的短信信息内容的累计评分值大于等于预设门限值时,执行与预设门限值对应的门限操作。The processing module is configured to perform a threshold operation corresponding to the preset threshold when the cumulative score of the content of the short message information of the calling number is greater than or equal to a preset threshold.
  7. 如权利要求6所述的短信过滤装置,其中,所述内容单元评分值样本为根据已知的垃圾短信内容和普通短信内容生成。The short message filtering device according to claim 6, wherein said content unit score value sample is generated based on known spam message content and normal message content.
  8. 如权利要求6所述的短信过滤装置,其中,所述评分模块还配置为:The short message filtering device of claim 6, wherein the scoring module is further configured to:
    接收信息中心通过接入网关传送的短信信息,对接收到的短信信息进行分词处理;The receiving information center performs the word segmentation processing on the received short message information by using the short message information transmitted by the access gateway;
    对分词处理后的每一个分词进行评分处理,累计分词的评分得到所述短信信息的评分值。Each participle after the word segmentation is scored, and the score of the accumulated participle obtains the score value of the short message information.
  9. 如权利要求6所述的短信过滤装置,其中,所述预设门限值至少包括以下之一:预设拦截门限值、预设加黑门限值、预设可疑短信门限值。The short message filtering device of claim 6, wherein the preset threshold value comprises at least one of the following: a preset intercept threshold, a preset black threshold, and a preset suspicious short message threshold.
  10. 如权利要求9所述的短信过滤装置,其中,所述处理模块还配置为:The short message filtering device of claim 9, wherein the processing module is further configured to:
    当所述主叫号码评分的累计值大于等于预设可疑短信门限值,将所述主叫号码的用户设置为可疑用户; When the accumulated value of the calling number score is greater than or equal to the preset suspicious short message threshold, the user of the calling number is set as a suspicious user;
    当所述主叫号码评分的累计值大于等于预设拦截门限值,拦截当前短信信息,拒绝将此短信信息发送给目的用户;When the accumulated value of the calling number score is greater than or equal to a preset intercept threshold, intercepting the current short message information, and refusing to send the short message information to the destination user;
    当所述主叫号码评分的累计值大于等于预设加黑门限值,将所述主叫号码的用户加入黑名单,并设置有效期。 When the accumulated value of the calling number score is greater than or equal to the preset blackening threshold, the user of the calling number is added to the blacklist, and the validity period is set.
PCT/CN2014/090365 2014-06-27 2014-11-05 Short message filtering method and apparatus WO2015196689A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410301139.XA CN105323733A (en) 2014-06-27 2014-06-27 Short message filtering method and device
CN201410301139.X 2014-06-27

Publications (1)

Publication Number Publication Date
WO2015196689A1 true WO2015196689A1 (en) 2015-12-30

Family

ID=54936629

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2014/090365 WO2015196689A1 (en) 2014-06-27 2014-11-05 Short message filtering method and apparatus

Country Status (2)

Country Link
CN (1) CN105323733A (en)
WO (1) WO2015196689A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110300383A (en) * 2019-05-24 2019-10-01 深圳市趣创科技有限公司 A kind of filtering junk short messages programmed algorithm and device and system and storage medium

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109951811B (en) * 2017-12-20 2021-04-20 中兴通讯股份有限公司 Service number short message monitoring method, device and system

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101945358A (en) * 2010-09-07 2011-01-12 成都市华为赛门铁克科技有限公司 Method and system for filtering junk short messages as well as terminal and server
CN102368853A (en) * 2011-09-26 2012-03-07 广州市动景计算机科技有限公司 Communication event processing method and system thereof
CN103152738A (en) * 2011-12-07 2013-06-12 腾讯科技(深圳)有限公司 Method and device of intelligent intercept

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101945358A (en) * 2010-09-07 2011-01-12 成都市华为赛门铁克科技有限公司 Method and system for filtering junk short messages as well as terminal and server
CN102368853A (en) * 2011-09-26 2012-03-07 广州市动景计算机科技有限公司 Communication event processing method and system thereof
CN103152738A (en) * 2011-12-07 2013-06-12 腾讯科技(深圳)有限公司 Method and device of intelligent intercept

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110300383A (en) * 2019-05-24 2019-10-01 深圳市趣创科技有限公司 A kind of filtering junk short messages programmed algorithm and device and system and storage medium

Also Published As

Publication number Publication date
CN105323733A (en) 2016-02-10

Similar Documents

Publication Publication Date Title
US10783455B2 (en) Bot-based data collection for detecting phone solicitations
CN103428183B (en) Method and device for identifying malicious website
JP7049087B2 (en) Technology to detect suspicious electronic messages
RU2013125976A (en) SYSTEM AND METHOD FOR DETERMINING THE RATING OF ELECTRONIC MESSAGES FOR THE FIGHT AGAINST SPAM
EP2959707A1 (en) Network security system and method
CN102333313A (en) Feature code generation method and detection method of mobile botnet
CN104883671B (en) A kind of judgment method and system of refuse messages
WO2017050108A1 (en) Authentication method, apparatus and system for accessing wifi hotspot
CN111147489B (en) Link camouflage-oriented fishfork attack mail discovery method and device
CN111212390B (en) Message queue processing method, device and equipment
US20140378104A1 (en) Method and device for processing short messages
CN109474510B (en) Mailbox safety cross audit method, system and storage medium
WO2015196689A1 (en) Short message filtering method and apparatus
CN107172622B (en) Method, device and system for identifying and analyzing pseudo base station short message
CN107493258A (en) A kind of intruding detection system based on network security
WO2016037489A1 (en) Method, device and system for monitoring rcs spam messages
WO2012151929A1 (en) Method and device for monitoring short message
CN112559595A (en) Security event mining method and device, storage medium and electronic equipment
CN113364722B (en) Network security protection method and device
CN109190408B (en) Data information security processing method and system
CN105488394B (en) A kind of method and system that intrusion behavior identification and classification are carried out towards honey pot system
CN108123789B (en) Method and device for analyzing security attack
US11558419B2 (en) Method and apparatus for autonomous identification of similar and adjacent attacks based on detected attacks
CN114363839A (en) Fraud data early warning method, device, equipment and storage medium
CN114168423A (en) Abnormal number calling monitoring method, device, equipment and storage medium

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14895696

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 14895696

Country of ref document: EP

Kind code of ref document: A1