ELECTRONIC MAIL ATTACHMENT HOLD AND DISPATCH FOR SECURITY MONITORING

摘要

Systems, apparatus, and computer program products provide for electronic mail (email) attachment hold and dispatch for security monitoring of email attachments. Specifically, embodiments of the invention provide for removing email attachments from emails containing such, holding the removed attachments in storage prior to delivering the email to the recipient and communicating the email to the intended recipient absent the attachment, but rather with a link or other means by which the email recipient can retrieve the attachment from the storage. Such a procedure not only allows for the attachment to be analyzed for threats prior to transferring the attachment to the email recipient, but also provides for a means by which information pertaining to the retrieval of the attachment is logged (e.g., who retrieved the attachment, from which computing device was the attachment retrieved, at what date and time was the attachment retrieved and the like).

主权项

1. A system for electronic mail (email) attachment hold and dispatch, the system comprising:
an attachment storage having a first memory and at least one first processor in communication with the first memory; one or more email servers having a second memory and at least one second processor in communication with the second memory; an email attachment hold and dispatch module stored in the second memory, executable by the second processor and configured to:
upon receipt of emails by the email server, identify emails that include attachments,remove the attachments from the emails and store the attachments in the first memory of the attachment storage,reconfigure the emails to include access to an electronic link to the attachment;communicate the reconfigured emails to electronic mailboxes of associated email recipients, andin response to the email recipients activating the electronic link from a computing device to retrieve the attachment, transfer the email attachment from the first memory of the attachment storage to the computing device, and an email attachment access logging module stored in the second memory, executable by the second processor and configured to log information associated with the email recipient activating the electronic link to transfer the email attachment from the first memory of the attachment storage to the computing device.