CPC H04L 63/0263 (2013.01) [H04L 63/0245 (2013.01); H04L 63/0254 (2013.01); H04L 63/1433 (2013.01); H04L 63/1483 (2013.01)] | 16 Claims |
1. A method, comprising:
determining a long term measure of reputation associated with a sender account of an email message;
determining a recent short term measure of reputation associated with the sender account of the email message, the recent short term measure of reputation being separate from the long term measure of reputation; and
filtering the email message based on a comparison of the determined long term measure of reputation with a first threshold associated with the sender account of the email message and a comparison of the determined short term measure of reputation with a second threshold associated with the sender account of the email message, wherein a time window associated with the long term measure of reputation is longer than a time window associated with the recent short term measure of reputation,
wherein, when the long term measure of reputation is less than the first threshold and the short term measure of reputation is less than the second threshold, the email message is filtered by blocking the email message from being sent to a recipient account of the email message, and
wherein, when the long term measure of reputation is greater than the first threshold and the short term measure of reputation is less than the second threshold, the email message is filtered by modifying the email message with a warning and delivering the modified email message to the recipient account of the email message.
|