Fraudulent Message Detection

• US 20080168555A1
• Filed: 10/29/2007
• Published: 07/10/2008
• Est. Priority Date: 09/08/2003
• Status: Active Grant

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: MailFrontier Incorporated (SonicWall Holdings Ltd.)
• Inventors: Eikenberry, Scott D., Kim, Brian, Oliver, Jonathan, Budman, Gleb
• Granted Patent: US 7,665,140 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

A technique for classifying a message is disclosed. In some embodiments, the technique comprises extracting a plurality of reference points, classifying the plurality of reference points, and detecting that the message is a phish message based on the classified reference points. In some embodiments, the technique comprises identifying a plurality of fraud indicators in the message, applying a statistical analysis on the plurality of fraud indicators; and determining whether the message is a fraudulent message based on the analysis.

Claims

1. A method for classifying a message, comprising:

extracting a plurality of reference points;

classifying the plurality of reference points; and

detecting that the message is a phish message based on the classified reference points.

2-28. -28. (canceled)