Identification of content

• US 9,077,674 B2
• Filed: 09/23/2013
• Issued: 07/07/2015
• Est. Priority Date: 12/31/2008
• Status: Expired due to Fees

• Current Assignee: Quest Software, Inc.
• Original Assignee: Dell Software, Inc. (Dell Technologies Inc.)
• Inventors: Yu, Sijie
• Primary Examiner(s): Gee, Jason K
• Application Number:
  US14/034,314
• Publication Number:
  US 20140019568A1
• Time in Patent Office: 652 Days
• Field of Search: 726/22
• US Class Current: 1/1
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/42 Mailbox-related aspects, e.g. synchronisation of mailboxes

Abstract

Systems and methods for identifying content in electronic messages are provided. An electronic message may include certain content. The content is detected and analyzed to identify any metadata. The metadata may include a numerical signature characterizing the content. A thumbprint is generated based on the numerical signature. The thumbprint may then be compared to thumbprints of previously received messages. The comparison allows for classification of the electronic message as spam or not spam.

Claims

1. A method for identifying content in electronic messages, the method comprising:

storing a plurality of thumbprints in a database in memory, wherein each of the plurality of thumbprints is associated with messages identified as spam;

receiving an electronic message sent over a communication network; and

executing instructions stored in memory, wherein execution of the instructions by a processor;

detects content in the received electronic message,

identifies metadata including a numerical signature characterizing one or more colors in the content,

generates a plurality of variations for the numerical signature, wherein each variation characterizes at least one aspect of content that is different from any content in the received electronic message,

matches a thumbprint of at least one variation to one of the thumbprints stored in the database as being associated with spam, and

classifies the received electronic message as spam based on the match.

2. The method of claim 1, wherein the numerical signature includes one or more values of a color table.

3. The method of claim 1, wherein the numerical signature includes one or more values of color intensity.

4. The method of claim 1, wherein the numerical signature includes one or more locations of color.

5. The method of claim 1, wherein the numerical signature is a concatenation of values relating to the colors in the content.

6. The method of claim 1, wherein the numerical signature further characterizes dimensions of the content.

7. The method of claim 1, further comprising generating a thumbprint for each of the variations and comparing the generated thumbprints to the stored thumbprints.

8. The method of claim 7, further comprising storing the generated thumbprints in memory.

9. The method of claim 1, wherein generating each variation includes adjusting a value in the numerical signature, wherein the adjustment falls in a specified range.

10. A system for identifying content in electronic messages, the system comprising:

memory that stores a plurality of thumbprints in a database, wherein each of the plurality of thumbprints is associated with messages identified as spam;

a communication interface that receives an electronic message sent over a communication network; and

a processor that executes instructions stored in memory, wherein execution of the instructions by the processor;

detects content in the received electronic message,

identifies metadata including a numerical signature characterizing one or more colors in the content,

generates a plurality of variations for the numerical signature, wherein each variation characterizes at least one aspect of content that is different from any content in the received electronic message,

matches a thumbprint of at least one variation to one of the thumbprints stored in the database as being associated with spam, and

classifies the received electronic message as spam based on the match.

11. The system of claim 10, wherein the numerical signature includes one or more values of a color table.

12. The system of claim 10, wherein the numerical signature includes one or more values of color intensity.

13. The system of claim 10, wherein the numerical signature includes one or more locations of color.

14. The system of claim 10, wherein the numerical signature is a concatenation of values relating to the colors in the content.

15. The system of claim 10, wherein the numerical signature further characterizes dimensions of the content.

16. The system of claim 10, wherein the processor executes further instructions to generate a thumbprint for each of the variations and to compare the generated thumbprints to the stored thumbprints.

17. The system of claim 16, wherein the memory further stores the generated thumbprints.

18. The system of claim 10, wherein the processor generates each variation by adjusting a value in the numerical signature, wherein the adjustment falls in a specified range.

19. A non-transitory computer-readable storage medium, having embodied thereon a program executable by a processor to perform a method for identifying content in electronic messages, the method comprising:

storing a plurality of thumbprints in a database, wherein each of the plurality of thumbprints is associated with messages identified as spam;

receiving an electronic message sent over a communication network;

detecting content in the received electronic message;

identifying metadata including a numerical signature characterizing one or more colors in the content;

generating a plurality of variations for the numerical signature, wherein each variation characterizes at least one aspect of content that is different from any content in the received electronic message;

matching a thumbprint of at least one variation to one of the thumbprints stored in the database as being associated with spam; and

classifying the received electronic message as spam based on the match.