Systems and methods for categorizing network traffic content

摘要

A method for categorizing network traffic content includes determining a first characterization of the network traffic content determining a first probability of accuracy associated with the first characterization, and categorizing the network traffic content based at least in part on the first characterization and the first probability of accuracy. A method for use in a process to categorize network traffic content includes obtaining a plurality of data, each of the plurality of data representing a probability of accuracy of a characterization of network traffic content, and associating each of the plurality of data with a technique for characterizing network traffic content. A method for categorizing network traffic content includes determining a characterization of the network traffic content, determining a weight value associated with the characterization, and categorizing network traffic content based at least in part on the characterization of the network traffic content and the weight value.

主权项

1. A computer-implemented method of categorizing electronic message content comprising:
receiving, via a network interface device of a networked device on which the method is implemented through instructions executable by at least one processor, an electronic message; determining, through execution of instructions of an electronic message content categorization module on the at least one processor, that the electronic message likely includes undesirable content, the determining performed according to at least two different analysis techniques to obtain at least two different potential categorizations of the electronic message indicating the electronic message likely includes undesirable content, the at least two different analyses performed as a function of a database of known categorization properties of electronic message content; in accordance with a determination that at least two or more categorizations are of the same categorization type, adding all the probabilities of the at least two or more categorizations of the same categorization type creating a summation probability for the same categorization type; comparing the summation probability with the probabilities of all other categorizations; selecting the categorization with the highest probability from all categorizations including the categorization assigned with the summation probability; and storing, on a data storage device, by the electronic message content categorization module, a representation of the determination that the electronic message likely includes undesirable content and data derived from the electronic message such that the stored representation is available to assist in processing subsequently received electronic messages.