| 摘要 |
FIELD: physics, computer engineering.SUBSTANCE: invention relates to a method and a system for determining spam. The method comprises preliminary analysis of incoming messages to detect at least one message unrelated to legitimate messages and spam; generating metadata consisting of a set of a hash sum and an IP address of the sender for the detected incoming electronic message, using metadata preparation means, sending the metadata generated from the electronic message to a clusterisation means using interaction means; determining a cluster associated with the sent metadata, using the clusterisation means, obtaining the rating of the cluster associated with the sent metadata, wherein the obtained rating corresponds to the rating of the electronic message and directly depends on the number of different IP addresses of senders corresponding to metadata in said cluster; sending the electronic message rating to a decision means; determining, based on the electronic message rating and a predetermined upper threshold, whether the message is spam using the decision means.EFFECT: improved anti-spam security.32 cl, 12 dwg |
