基于SMTP协议解析的垃圾邮件防治技术

针对当前垃圾邮件的防治技术不足的问题,考虑到协议分析技术检测效率更高,检测准确度更高,并能对一些未知的攻击特征进行识别,因此结合对SMTP协议的分析来识别垃圾邮件,同时进行阻截,可有效防治垃圾邮件.介绍了SMTP的工作模式和协议分析过程,及对SMTP协议命令的解释.从协议分析的角度出发,实现SMTP协议分析程序--snifferSMTP.该程序分析从网络中捕获邮件数据包,还原出邮件信息,依据规则进行模式匹配,检测出入侵邮件.

Technique of Preventing Junk Mail Based on SMTP

At present, anti - spare techniques still have some defects. Considering the protocol analysis technology has a high detecting efficency and veracity. Meanwhile some chacteristics of anonymous attack ear, also be recognize. Therefore, spare can be identified and obstruted and prevented effectively through conbining the analysis of SMTP. In the paper, the working modes of SMTP, the process of protocol analysis and the commands of SMTP protocol are introduced. At the angle of the protocol analysis, snifferSMTP is implemented to analyze the data packets of Email, renew the content of Email, match the rules and detect the attack Email.