钓鱼邮件防范体系探讨

针对钓鱼邮件带来的严重网络安全问题和社会危害,鉴于当前国内外反钓鱼邮件主要技术存在的问题,通过分析钓鱼邮件的攻击过程及主要特征,结合黑名单过滤、白名单过滤、贝叶斯过滤3种技术各自的优点,提出了组合运用这3种技术实现对钓鱼邮件高效过滤的新思路,实现具有智能学习能力的有效过滤,同时降低钓鱼邮件的误报率和漏过率。研究提出了全面推行安全协议、正确使用安全管理软件的邮件服务器管理策略,以及用户使用邮件的安全方法,初步建立了一套在安全防范技术、安全管理策略、安全使用方法3方面着手的、较为完善的钓鱼邮件防范体系。

Phishing email prevention system

Given the serious network security problem and social harm caused by phishing email, as well as the current status of domestic and foreign anti-phishing email technology research, and based on the analysis of the advantages of Black list filtering, White list filtering and Bayesian filtering, a new idea of using the three technologies mentioned above was put forward to realize an effective filtration for phishing emails by analyzing phishing attack process and its main characteristics, which can not only realize the effective filtration with intelligent learning ability, but also lower the false alarm rate and leakage rate. Meanwhile, a managing strategy for mail server was presented which implements the security protocol and employs proper security management software, as well as a secure using method for users. A set of relatively comprehensive system of phishing e-mail prevention which consists of security technology, safety management strategy, safety use method was preliminary established.