Message Classification

• US 20080104235A1
• Filed: 10/29/2007
• Published: 05/01/2008
• Est. Priority Date: 02/10/2004
• Status: Active Grant

• Current Assignee: Quest Software, Inc.
• Original Assignee: MailFrontier Incorporated (SonicWall Holdings Ltd.)
• Inventors: Oliver, Jonathan, Koblas, David
• Granted Patent: US 8,612,560 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04L 45/74 Address processing for routing
• CPC Class Codes: H04L 47/40 using split connections
• CPC Class Codes: H04L 49/15 Interconnection of switching modules
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/4552 Lookup mechanisms between a plurality of directories; Synchronisation of directories, e.g. metadirectories
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A technique for classifying a message is disclosed. The technique includes determining the domain from which the message is purported to be sent, determining an IP address from which the message was relayed at some point in its transmission, associating the domain with the IP address, and classifying the message based on the associated domain and IP address.

Claims

1. A method for classifying a message, including:

determining the domain from which the message is purported to be sent;

determining an IP address from which the message was relayed at some point in its transmission;

associating the domain with the IP address; and

classifying the message based on the associated domain and IP address.

2-36. -36. (canceled)