中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

4 records (took 0.015 seconds)

    Bot-network detection based on simple mail transfer protocol (SMTP) characteristics of e-mail senders within IP address aggregates
    1.
    发明授权
    Bot-network detection based on simple mail transfer protocol (SMTP) characteristics of e-mail senders within IP address aggregates 有权
    基于IP地址聚合内的电子邮件发件人的简单邮件传输协议（SMTP）特征的Bot网络检测

    公开(公告)号：US09055012B2

    公开(公告)日：2015-06-09

    申请号：US13857269

    申请日：2013-04-05

    Applicant: AT&T Intellectual Property I, L.P.

    Inventor： Willa Kay Ehrlich ,  David A. Hoeflin ,  Danielle Liu ,  Chaim Spielman ,  Stephen Wood

    IPC: H04L29/06 ,  H04L12/58 ,  G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G08B23/00

    CPC classification number: H04L51/00 ,  H04L63/1441

    Abstract: A method and system for determining whether an IP address is part of a bot-network are provided. The IP-address-aggregate associated with the IP address of an e-mail sender is determined. The IP-address-aggregate is associated with an IP-address-aggregate-category based on the current SMTP traffic characteristics of the IP-address-aggregate and the known SMTP traffic characteristics of an IP-address-aggregate-category. A bot-likelihood score of the IP-address-aggregate-category is then associated with IP-address-aggregate. IP-address-aggregate-categories can be established based on historical SMTP traffic characteristics of the IP-address-aggregates. The IP-address-aggregates are grouped based on SMTP characteristics, and the IP-address-aggregate-categories are defined based on a selection of IP-address-aggregates with similar SMTP traffic characteristics that are diagnostic of spam bots vs. non-botnet-controllers spammers. Bot likelihood scores are determined for the resulting IP-address-aggregate-categories based on historically known bot IP addresses.

    Abstract translation: 提供一种用于确定IP地址是机器人网络的一部分的方法和系统。 确定与电子邮件发件人的IP地址相关联的IP地址聚合。 基于IP地址聚合的当前SMTP流量特性和IP地址聚合类别的已知SMTP流量特性，IP地址聚合与IP地址聚合类别相关联。 然后将IP地址聚合类别的机率分数与IP地址聚合相关联。 可以基于IP地址聚合的历史SMTP流量特性来建立IP地址聚合类别。 基于SMTP特性对IP地址聚合进行分组，IP地址聚合类别是根据具有类似SMTP流量特性的IP地址聚合的选择来定义的，这些特征是对垃圾邮件机器人与非僵尸网络的诊断 控制垃圾邮件发送者。 基于历史上已知的机器人IP地址，为生成的IP地址聚合类别确定Bot似然分数。

    Bot-Network Detection Based on Simple Mail Transfer Protocol (SMTP) Characteristics of E-Mail Senders Within IP Address Aggregates
    2.
    发明申请
    Bot-Network Detection Based on Simple Mail Transfer Protocol (SMTP) Characteristics of E-Mail Senders Within IP Address Aggregates 有权
    基于IP地址聚合中电子邮件发件人的简单邮件传输协议（SMTP）特征的Bot网络检测

    公开(公告)号：US20130227045A1

    公开(公告)日：2013-08-29

    申请号：US13857269

    申请日：2013-04-05

    Applicant: AT&T Intellectual Property I, L.P.

    Inventor： Willa Kay Ehrlich ,  David A. Hoeflin ,  Danielle Liu ,  Chaim Spielman ,  Stephen Wood

    IPC: H04L12/58

    CPC classification number: H04L51/00 ,  H04L63/1441

    Abstract: A method and system for determining whether an IP address is part of a bot-network are provided. The IP-address-aggregate associated with the IP address of an e-mail sender is determined. The IP-address-aggregate is associated with an IP-address-aggregate-category based on the current SMTP traffic characteristics of the IP-address-aggregate and the known SMTP traffic characteristics of an IP-address-aggregate-category. A bot-likelihood score of the IP-address-aggregate-category is then associated with IP-address-aggregate. IP-address-aggregate-categories can be established based on historical SMTP traffic characteristics of the IP-address-aggregates. The IP-address-aggregates are grouped based on SMTP characteristics, and the IP-address-aggregate-categories are defined based on a selection of IP-address-aggregates with similar SMTP traffic characteristics that are diagnostic of spam bots vs. non-botnet-controllers spammers. Bot likelihood scores are determined for the resulting IP-address-aggregate-categories based on historically known bot IP addresses.

    Abstract translation: 提供一种用于确定IP地址是机器人网络的一部分的方法和系统。 确定与电子邮件发件人的IP地址相关联的IP地址聚合。 基于IP地址聚合的当前SMTP流量特性和IP地址聚合类别的已知SMTP流量特性，IP地址聚合与IP地址聚合类别相关联。 然后将IP地址聚合类别的机率分数与IP地址聚合相关联。 可以基于IP地址聚合的历史SMTP流量特性来建立IP地址聚合类别。 基于SMTP特性对IP地址聚合进行分组，IP地址聚合类别是根据具有类似SMTP流量特性的IP地址聚合的选择来定义的，这些特征是对垃圾邮件机器人与非僵尸网络的诊断 控制垃圾邮件发送者。 基于历史上已知的机器人IP地址，为生成的IP地址聚合类别确定Bot似然分数。

Patent Agency Ranking