基于通用网络测量平台的反垃圾邮件技术

以通用网络测量平台为基础,提出了一种新的不同于诸如黑名单和邮件过滤等现有反垃圾邮件技术的检测和防范垃圾邮件的方法。在本地网的监测点将进出的与邮件相关的通信量汇聚成邮件流,并区分成无效邮件流、正常邮件流和异常邮件流,然后根据这3种邮件流的统计特性,检测出本地网中产生的广告邮件、垃圾邮件病毒以及异常邮件行为,并通过基于策略的响应机制实施拦截和预警。

Anti-Spam Based on Universal Network Measurement Platform

Based on the universal network measurement platform, a new method for detecting and defending spam is proposed, which is different from existing anti-spam technologies such as Blackhole List and mail filter. The traffic associated with mails is gathered into mail flows at the monitor points in local networks, which classified as invalid mail flows, normal mail flows and abnormal mail flows. Then according to the statistical characteristic of the three kinds of mail flows, ad spam, spam virus and abnormal mail behaviors are detected, and interception and alarms are performed by the policy-based responding mechanism.