Back to results
US 2017/0208024 A1Published application
Apparatus and Method for Augmenting a Message to Facilitate Spam Identification
AssigneeCloudmark, Inc.
InventorMark Stemm
Life of this patent
Estimating the term…
Abstract
A computer includes a processor and a memory connected to the processor. The memory stores instructions executed by the processor to augment a message with network node attributes derived by linking from an original network node specified in the message to additional network nodes associated with the original network node. Message signatures representing the network node attributes are generated. The message signatures are evaluated to characterize the message.
Claims11
A computer, comprising:
- a processor;
- and
- a memory connected to the processor, the memory storing instructions executed by the processor to:
- receive an electronic mail message with original network nodes specifying original host names and original Internet Protocol (IP) addresses,
- perform a machine lookup to identify additional host names and additional IP addresses associated with the original host names and original IP addresses,
- establish a graph of relationships between the original host names and original IP address to the additional host names and additional IP addresses, wherein the original network nodes are used to identify the additional host names and additional IP addresses that are not present in in the electronic mail message, but are added to the graph of relationships, and
- evaluate the graph of relationships to characterize the message, wherein the evaluate operation spreads unsolicited bulk electronic message (spam) characteristics from a parent node in the graph of relationships to child nodes of the parent node in the graph of relationships.
4 more elements
Dependencies are inferred from the claim text.