Determining whether to quarantine a message
First Claim
Patent Images
1. An apparatus, comprising:
- a network interface;
one or more processors coupled to the network interface;
logic coupled to the one or more processors which, when executed by the one or more processors, causes the one or more processors to perform;
receiving an electronic mail message having a destination address for a recipient account;
determining a threat score value for the message;
when the threat score value is greater than or equal to a specified threat threshold, storing the message in a quarantine queue without immediately delivering the message to the recipient account;
releasing the message from the quarantine queue in other than first-in-first-out order upon any of a plurality of quarantine exit criteria, wherein each quarantine exit criterion is associated with one or more exit actions; and
upon a particular exit criterion, selecting and performing the associated one or more exit actions.
0 Assignments
0 Petitions
Accused Products
Abstract
Determining whether to quarantine a message is disclosed. A dynamic and flexible threat quarantine queue is provided with a variety of exit criteria and exit actions that permits early release of messages in other than first in, first-out order.
444 Citations
23 Claims
-
1. An apparatus, comprising:
-
a network interface;
one or more processors coupled to the network interface;
logic coupled to the one or more processors which, when executed by the one or more processors, causes the one or more processors to perform;
receiving an electronic mail message having a destination address for a recipient account;
determining a threat score value for the message;
when the threat score value is greater than or equal to a specified threat threshold, storing the message in a quarantine queue without immediately delivering the message to the recipient account;
releasing the message from the quarantine queue in other than first-in-first-out order upon any of a plurality of quarantine exit criteria, wherein each quarantine exit criterion is associated with one or more exit actions; and
upon a particular exit criterion, selecting and performing the associated one or more exit actions. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. An apparatus, comprising:
-
means for receiving an electronic mail message having a destination address for a recipient account;
means for determining a threat score value for the message;
means for storing the message in a quarantine queue without immediately delivering the message to the recipient account when the threat score value is greater than or equal to a specified threat threshold;
means for releasing the message from the quarantine queue in other than first-in-first-out order upon any of a plurality of quarantine exit criteria, wherein each quarantine exit criterion is associated with one or more exit actions; and
means for selecting and performing the associated one or more exit actions upon a particular exit criterion.
-
-
13. A method, comprising:
-
receiving an electronic mail message having a destination address for a recipient account;
determining a threat score value for the message;
when the threat score value is greater than or equal to a specified threat threshold, storing the message in a quarantine queue without immediately delivering the message to the recipient account;
releasing the message from the quarantine queue in other than first-in-first-out order upon any of a plurality of quarantine exit criteria, wherein each quarantine exit criterion is associated with one or more exit actions; and
upon a particular exit criterion, selecting and performing the associated one or more exit actions. - View Dependent Claims (14, 15, 16, 17, 18, 19, 20, 21, 22, 23)
-
Specification