Anti-spam profile clustering based on user behavior

A non-transitory computer-readable storage medium storing one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:

• defining a plurality of filtering profiles for application to incoming email messages, wherein each filtering profile in the plurality of filtering profiles is configured to filter the incoming email messages according to a different set of filtering rules;
• assigning a first filtering profile from the plurality of filtering profiles to a user;
• applying rules of the set of filtering rules of the first filtering profile to the incoming email messages;
• delivering the incoming email messages based on the application of the rules;
• tracking actions performed by the user on two or more of the incoming email messages;
• using the tracked actions to determine a first performance score, the first performance score;
• wherein the first performance score indicates how accurately the first filtering profile is filtering incoming email messages of the user;
• wherein tracking the actions performed by the user on the two or more of the incoming email messages includes at least
• tracking a first set of actions of a first type performed by the user on one or more of the incoming email messages, and
• tracking a second set of actions of a second type performed by the user on one or more other of the incoming email messages,
• wherein the first type is different than the second type;
• wherein both the first set of actions and the second set of actions include only actions that indicate that the first filtering profile incorrectly filtered email messages that should not have been filtered;
• in response to determining that the user performed an action that belongs to the first set of actions and that indicates that the first filtering profile incorrectly filtered an email message that should not have been filtered, affecting the first performance score by a first amount;
• in response to determining that the user performed an action that belongs to the second set of actions and that indicates that the first filtering profile incorrectly filtered an email message that should not have been filtered, affecting the first performance score by a second amount;
• wherein the first amount is different than the second amount;
• assigning a second filtering profile from the plurality of filtering profiles to the user based at least in part on the first performance score as affected by at least one of the first amount or the second amount.

A method of tracking a performance of a filtering profile using a filtering system, the method comprising:

• defining a first filtering profile to be applied to incoming email messages of a user, wherein the first filtering profile filters the incoming email messages of the user according to a set of filtering rules;
• based at least in part on actions performed on the incoming email messages of the user, determining how accurately the first filtering profile is filtering the incoming email messages of only the user;
• based at least in part on actions performed on incoming email messages of a set of users that includes the user and one or more additional users, determining how accurately the first filtering profile is filtering the incoming email messages of the set of users;
• maintaining, by the filtering system, both:
• (a) a first performance score that applies to only the first filtering profile and indicates how accurately the first filtering profile is filtering the incoming email messages of only the user, and (b) a first performance index that applies to only the first filtering profile and indicates how accurately the first filtering profile is filtering the incoming email messages of the set of users;
• comparing the first performance score to a particular score value;
• the filtering system performing a first type of action on the first filtering profile in response to the first performance score being less than the particular score value;
• and
• comparing the first performance index to a particular index value;
• the filtering system performing a second type of action on the first filtering profile in response to the first performance index being less than the particular index value;
• wherein the first type of action is different than the second type of action;
• wherein the method is performed by one or more computing devices.

One or more non-transitory computer-readable media storing instructions for tracking a performance of a filtering profile using a filtering system, wherein the instructions, when executed by one or more processors, cause:

• defining a first filtering profile to be applied to incoming email messages of a user, wherein the first filtering profile filters the incoming email messages of the user according to a set of filtering rules;
• based at least in part on actions performed on the incoming email messages of the user, determining how accurately the first filtering profile is filtering the incoming email messages of only the user;
• based at least in part on actions performed on incoming email messages of a set of users that includes the user and one or more additional users, determining how accurately the first filtering profile is filtering the incoming email messages of the set of users;
• maintaining, by the filtering system, both:
• (a) a first performance score that applies to only the first filtering profile and indicates how accurately the first filtering profile is filtering the incoming email messages of only the user, and (b) a first performance index that applies to only the first filtering profile and indicates how accurately the first filtering profile is filtering the incoming email messages of the set of users;
• comparing the first performance score to a particular score value;
• performing, by the filtering system, a first type of action on the first filtering profile in response to the first performance score being less than the particular score value;
• and comparing the first performance index to a particular index value;
• performing, the filtering system, a second type of action on the first filtering profile in response to the first performance index being less than the particular index value;
• wherein the first type of action is different than the second type of action;
• wherein the method is performed by one or more computing devices.