基于通用网络测量平台的反垃圾邮件技术.PDFVIP

2004 12 Dec. 2004 27 6 Journal of Beijing University of Posts and Telecommunications ol. 27 No. 6 　　: 1007-5321(2004) 06-0045-05 仇小锋,　陈　鸣 (, 210007) : , . ,、, 3, 、, . 　　: ; ; : T P393　　　: A Anti-Spam Based on Universal NetworkMeasurement Platform QIU Xiao-feng,　CHEN Ming ( Institute of Command Automation, People s Liberation Army University of Science and Technology, Nanjing 210007, China) Abstract: Based on theuniversal network measurement platform, a new method for detecting and defending spam is proposed which is different from existing anti, - spam technologies such as Blackhole List and mail filter The traffic associated with. mails is gathered into mail flows at the monitor points in local networks, which classified as invalid mail flows, normal mail flows and abnormal mail flows. Then according to the statistical characteristic of the three kinds of mail flows ad spam, , spam virus and abnormal mail behaviors are detected, and interception and alarms are performed by the policy-based responding mechanism. Key words: spam; anti-spam; network measurement 1　 ,, . Spam, UCE(unsolicited commercial email) UBE(unsolicited bulk email). 2. , : 2004-09-02 : “863”( 2001AA112090) : ( 1976— ) ,,,. E-mail: qiuxfeng@ 163. com 　( 1956— ) ,,,. - : @ 1. . . E mail mingchen public ptt js cn 46 27　 40% , 205. 2. (Blackhole List) , . ( RBL,real-time Blackhole [1] List) . 3: M TA()、 MDA() MUA(), ,. ,. 2　 2. 1　 ( UNME univer