公开(公告)号：US07853654B2

公开(公告)日：2010-12-14

申请号：US11033111

申请日：2005-01-12

申请人： Katsuyuki Yamazaki ,  Hiromitsu Fujikawa ,  Akihiro Nakashima ,  Teruaki Honma ,  Kenichi Yoshida

发明人： Katsuyuki Yamazaki ,  Hiromitsu Fujikawa ,  Akihiro Nakashima ,  Teruaki Honma ,  Kenichi Yoshida

IPC分类号： G06F15/16

CPC分类号： H04L51/12

摘要： The present invention is to provide a mass mail detection device that eliminates the need for preparation of rules or learning in advance and operates at a high speed. Electronic mail collecting means analyzes the electronic mail delivery protocol that flows on the network, and extracts an electronic mail main text from the electronic mail traffic that flows on the network. Next, characteristic quantity conversion means calculates a number of hash values from the electronic mail main text, as the characteristic quantity of the mail. Finally, mass mail detection means compares the newly received electronic mail with the stored past electronic mails, and determines the similarity in accordance with a specific standard. If determined as being similar, the new mail is determined as a candidate for a mass mail (similar mails), and a prescribed number or more of similar mails are determined as a mass mail.

摘要翻译： 本发明是提供一种大规模邮件检测装置，其不需要预先准备规则或学习，并且高速运转。 电子邮件收集装置分析在网络上流动的电子邮件传送协议，并从网络上流动的电子邮件流量提取电子邮件主文本。 接下来，特征量转换装置计算来自电子邮件主文本的哈希值的数量作为邮件的特征量。 最后，大容量邮件检测装置将新接收到的电子邮件与存储的过去的电子邮件进行比较，并根据特定标准确定相似性。 如果确定为类似的，新邮件被确定为大量邮件（类似邮件）的候选者，并且将规定数量或更多的类似邮件确定为大量邮件。

公开(公告)号：US20050188032A1

公开(公告)日：2005-08-25

申请号：US11033111

申请日：2005-01-12

申请人： Katsuyuki Yamazaki ,  Hiromitsu Fujikawa ,  Akihiro Nakashima ,  Teruaki Honma ,  Kenichi Yoshida

发明人： Katsuyuki Yamazaki ,  Hiromitsu Fujikawa ,  Akihiro Nakashima ,  Teruaki Honma ,  Kenichi Yoshida

IPC分类号： G06F17/30 ,  G06F13/00 ,  G06F15/16 ,  H04L12/58

CPC分类号： H04L51/12

摘要： The present invention is to provide a mass mail detection device that eliminates the need for preparation of rules or learning in advance and operates at a high speed. Electronic mail collecting means analyzes the electronic mail delivery protocol that flows on the network, and extracts an electronic mail main text from the electronic mail traffic that flows on the network. Next, characteristic quantity conversion means calculates a number of hash values from the electronic mail main text, as the characteristic quantity of the mail. Finally, mass mail detection means compares the newly received electronic mail with the stored past electronic mails, and determines the similarity in accordance with a specific standard. If determined as being similar, the new mail is determined as a candidate for a mass mail (similar mails), and a prescribed number or more of similar mails are determined as a mass mail.

摘要翻译： 本发明是提供一种大规模邮件检测装置，其不需要预先准备规则或学习，并且高速运转。 电子邮件收集装置分析在网络上流动的电子邮件传送协议，并从网络上流动的电子邮件流量提取电子邮件主文本。 接下来，特征量转换装置计算来自电子邮件主文本的哈希值的数量作为邮件的特征量。 最后，大容量邮件检测装置将新接收到的电子邮件与存储的过去的电子邮件进行比较，并根据特定标准确定相似性。 如果确定为类似的，新邮件被确定为大量邮件（类似邮件）的候选者，并且将规定数量或更多的类似邮件确定为大量邮件。