Method and Apparatus for Detecting Abusive Email Based on Number of Hops
First Claim
Patent Images
1. An arrangement of circuits, comprising:
- a first circuit configured and arranged for determining the number of message transfer agents through which an email message has traveled; and
a second circuit configured and arranged for designating the email message as abusive if a predetermined set of conditions is satisfied, the predetermined set of conditions including that the number of message transfer agents through which the email message has traveled is below a predetermined threshold.
3 Assignments
0 Petitions
Accused Products
Abstract
A classifier is implemented to determine the number of message transfer agents (MTAs) through which an email message has traveled. If the number of MTAs through which the email message has traveled is below a predetermined threshold and the email message is not otherwise authenticated, the classifier will designate the email message as abusive.
-
Citations
25 Claims
-
1. An arrangement of circuits, comprising:
-
a first circuit configured and arranged for determining the number of message transfer agents through which an email message has traveled; and a second circuit configured and arranged for designating the email message as abusive if a predetermined set of conditions is satisfied, the predetermined set of conditions including that the number of message transfer agents through which the email message has traveled is below a predetermined threshold. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. An arrangement of circuits, comprising:
-
a first circuit configured and arranged for determining the number of message transfer agents through which an email message has traveled; a second circuit configured and arranged for using the number and a plurality of other factors that each contribute a weighted score to calculate a final abuse score; and a third circuit configured and arranged for comparing the final abuse score with a predetermined threshold and designating said email message as abusive if the final abuse score has a specified relationship to the predetermined threshold. - View Dependent Claims (9, 10)
-
-
11. An arrangement of circuits comprising:
-
a first circuit configured and arranged for determining the number of message transfer agents through which an email message has traveled; and a second circuit configured and arranged for marking the email message as possibly abusive for further consideration if the number of message transfer agents through which the email message has traveled is below a predetermined threshold. - View Dependent Claims (12, 13, 14)
-
-
15. An arrangement of circuits comprising:
-
a first circuit configured and arranged for examining an email message'"'"'s headers to determine if a predefined header is present, said predefined header having been inserted, if present, by a message transfer agent as a result of said email message traveling through the message transfer agent, wherein said message transfer agent is not a message transfer agent serving at the email message'"'"'s final destination; and a second circuit configured and arranged for designating the email message as abusive if the predefined header is not present in the said email message'"'"'s headers and the email message has no previous session or message authentication. - View Dependent Claims (16)
-
-
17. An apparatus for detecting an abusive email message, the apparatus comprising:
-
means for examining an email message'"'"'s headers to determine if a predefined header is present, said predefined header having been inserted, if present, by a message transfer agent as a result of said email message traveling through said message transfer agent, wherein said message transfer agent is not a message transfer agent serving at the email message'"'"'s final destination; and means for designating the said email message as abusive if the predefined header is not present in the said email message'"'"'s headers and the said email message has no previous session or message authentication. - View Dependent Claims (18)
-
-
19. A machine-readable program storage medium storing instructions which, when executed in a processing system, cause the processing system to perform a method, the method comprising:
-
examining an email message'"'"'s headers to determine if a predefined header is present, said predefined header having been inserted, if present, by a message transfer agent as a result of said email message traveling through said message transfer agent, wherein said message transfer agent is not a message transfer agent serving at the email message'"'"'s final destination; and if the predefined header is not present in the said email message'"'"'s headers and the email message has no previous session or message authentication, designating the email message as abusive. - View Dependent Claims (20)
-
-
21. An arrangement of circuits, comprising:
-
a first circuit configured and arranged for providing a signal to represent a number of message transfer agents through which an email message has traveled; and a second circuit configured and arranged for designating the email message as abusive if a predetermined set of conditions is satisfied, the predetermined set of conditions including that the number of message transfer agents through which the email message has traveled is less than a predetermined number of message transfer agents. - View Dependent Claims (22, 23, 24, 25)
-
Specification