Anti-Spam Based on Universal Network Measurement Platform
Ming Chen · Beijing Youdian Xueyuan xuebao · 2004
Based on the universal network measurement platform, a new method for detecting and defending spam is proposed, which is different from existing anti-spam technologies such as Blackhole List and mail filter. The traffic associated with mails is gathered into mail flows at the monitor points in local networks, which classified as invalid mail flows, normal mail flows and abnormal mail flows. Then according to the statistical characteristic of the three kinds of mail flows, ad spam, spam virus and abnormal mail behaviors are detected, and interception and alarms are performed by the policy-based responding mechanism.