Methods and apparatus to improve the efficiency of an artificial intelligence-based threat detection model

A non-transitory machine readable storage medium to generate a list of non-suspicious email addresses to be used by an artificial intelligence-based threat detection model that is to analyze an email for a threat, the non-transitory machine readable storage medium comprising instructions to cause programmable circuitry to at least:

• obtain an email address from a group of email addresses to be considered as candidates for adding to the list of non-suspicious email addresses;
• determine that a domain of the email address is indicative of a non-email service providing entity;
• determine that the email address has a policy configured for a domain-based message authentication, reporting, and conformance (DMARC) record;
• add the email address associated to the list of non-suspicious email addresses;
• and
• cause the artificial intelligence-based threat detection model to skip an analysis of an email associated with the email address.

A server to distribute first software instructions on a network to generate a list of non-suspicious email addresses to be used by an artificial intelligence-based threat detection model that is to analyze an email for a threat, the server comprising:

• at least one storage device including second instructions;
• and
• at least one processor to execute the second instructions to transmit the first software instructions over the network, the first software instructions, when executed, to cause at least one device to:
• obtain an email address from a group of email addresses to be considered as candidates for adding to the list of non-suspicious email addresses;
• determine that a domain of the email address is indicative of a non-email service providing entity;
• determine that the email address has a policy configured for a domain-based message authentication, reporting, and conformance (DMARC) record;
• add the email address associated to the list of non-suspicious email addresses;
• and
• cause the artificial intelligence-based threat detection model to skip an analysis of an email associated with the email address.