Identifying and blocking mobile messaging service spam

摘要

Systems and method for identifying and blocking short messaging service spam are disclosed. In some aspects, a first mobile messaging service message is received from a messaging source in a node of a mobile communication network, the first mobile messaging service message being addressed to a destination mobile device. The first mobile messaging service message is forwarded through the mobile communication network for delivery to the destination mobile device. Whether or not the first mobile messaging service message meets a spam messaging criterion is determined, where determining whether or not the first mobile messaging service message meets the spam messaging criterion occurs in parallel with forwarding the first mobile messaging service message through the mobile communication network. Information identifying the messaging source as a spam source is stored, upon determining that the first mobile messaging service message meets the spam messaging criterion.

主权项

1. A method comprising steps of:
receiving a first mobile messaging service message from a messaging source in a node of a mobile communication network, the first mobile messaging service message being addressed to a destination mobile device, the messaging source not currently identified as a spam source; forwarding the first mobile messaging service message through the mobile communication network for delivery to the destination mobile device; determining whether or not the first mobile messaging service message meets a spam messaging criterion, wherein determining whether or not the first mobile messaging service message meets the spam messaging criterion occurs in parallel with the forwarding of the first mobile messaging service message through the mobile communication network for delivery to the destination mobile device; and storing information identifying the messaging source as a spam source, upon determining that the first mobile messaging service message meets the spam messaging criterions; wherein at least one of: (i) the method further comprises steps of:
receiving a second mobile messaging service message from the messaging source in a node of the mobile communication network;upon determining, using the stored information, that the second mobile messaging service message originated from a spam source, analyzing the second mobile messaging service message to determine whether or not the second mobile messaging service message is a spam message;blocking delivery of the second mobile messaging service message through the mobile communication network in response to the determination that the second mobile messaging service message is a spam message; andtransmitting a message to the messaging source indicating successful transmission of the second mobile messaging service message through the mobile communication network; and (ii) determining whether or not the first mobile messaging service message meets the spam messaging criterion is based on analyzing a set of factors comprising one or more of: content of a payload of the first messaging service message, velocity or volume of messaging service messages received through the mobile communication network from the messaging source and presence of a malicious link in the first mobile messaging service message, and determining whether or not the first mobile messaging service message meets the spam messaging criterion is completed using an adaptive threshold computed using the set of factors, the adaptive threshold being based on whether the messaging source has been previously identified as a spam source or on whether the messaging source has never been identified as a spam source.