Method and apparatus for reclassifying e-mail or modifying a spam filter based on users' input

摘要

A method is disclosed including passing a plurality of e-mails through a spam filter and classifying at least of the plurality of e-mails as not spam. Thereafter, the plurality of e-mails are received at each of a plurality of user computers. The method may further include receiving a plurality of reports, the plurality of reports including one report from each of the plurality of user computers that one or more of the plurality of e-mails are spam that was not classified as spam by the spam filter. Based on the plurality of reports, one or more of the plurality of e-mails is reclassified as spam and/or the spam filter is modified.

主权项

1. A method comprising:
transmitting a first email, classified at a spam filter as not-spam-email, to each of a plurality of user computers; receiving a report from a user computer of the plurality of user computers indicating whether the first email, previously classified at the spam filter as not-spam-email, is spam; upon receiving the report, checking entries, in a user reputation database, related to a reputation of the user computer; and if the reputation of the user computer is indicated as a bad reputation and the user computer incorrectly identified the first email as not-spam-email, identifying the user computer as having been compromised.