Importance

Loading Importance Indicators...

Abstract

From a set of electronic messages, we describe how to use Bulk Message Envelopes (BMEs), each of which collects together closely related or identical messages, to extract metadata. The types of metadata depend on the modality of the messages. For email, these include domain, hash, style, relay and user address. We find clusters in each of these spaces, where the making of the clusters is the same, regardless of the space. The clusters can be used to reveal associations between different elements of that space, where these associations may not be apparent from a simple consideration of the individual, original messages. Specifically, domain clusters can be used to make or augment a Real time Blocking List (RBL), where the domains are found from links in the bodies of the messages. Large RBLs can be easily constructed, in an automated or near-automated fashion; aiding in antispam and antiphishing efforts.

Loading the Abstract Image...

First Claim