×

Subscriber reputation filtering method for analyzing subscriber activity and detecting account misuse

  • US 8,484,295 B2
  • Filed: 12/21/2005
  • Issued: 07/09/2013
  • Est. Priority Date: 12/21/2004
  • Status: Active Grant
First Claim
Patent Images

1. A computer-implemented method comprising:

  • receiving messages originated by at least one subscriber account;

    evaluating the messages in order to develop a profile for the at least one subscriber account, wherein the profile includes information associated with content evaluation for the messages, and further includes metrics including a total number of e-mail messages originated from the at least one subscriber account within a predefined time interval, and an average number of recipients to which messages originated by the subscriber are addressed;

    generating behavior data for the at least one subscriber account to be included in the profile, wherein behavior data generated from a single e-mail message originated from the at least one subscriber account is combined with long-term behavior data in the profile to determine if the at least one subscriber account'"'"'s privileges should be reduced;

    detecting behavior-based anomalies for the at least one subscriber account, wherein the behavior-based anomalies include attempting to communicate a large number of new e-mail messages in comparison to messaging patterns related to the behavior data being maintained in the profile, and include detecting an abnormal DNS query pattern; and

    determining reputation data for the at least one subscriber account based, at least in part, on the content evaluation and on said detected behavior-based anomalies, and wherein the behavior-based anomalies cause a blind carbon copy recipient to be added to the new email messages and, further, cause the new e-mail messages to be redirected to a destination for which they were not originally intended, and wherein a trustworthiness rating included in the profile is reduced as a result of detecting the behavior-based anomalies.

View all claims
  • 15 Assignments
Timeline View
Assignment View
    ×
    ×