Method and system for asynchronous analysis of URLs in messages in a live message processing environment

摘要

A method and apparatus for asynchronous analysis of URLs in messages in a live message processing environment whereby an identified URL included in a message identified for further analysis is extracted and prioritized based on one or more prioritization parameters. The URL is then sent from a live message processing stream to a URL analysis process and the live message processing stream is stalled, with respect to that message, until the results of the URL analysis process are received, or until a defined “timeout” period passes. The results, or “verdict”, of the URL analysis process are then sent back to the live message processing stream in an asynchronous manner based on the prioritization of the URL. If the results of the URL analysis process are not received by the live message processing stream before the defined “timeout” period passes, then the “best” action is taken based on the best available data/verdict. If the results of the URL analysis process are received by the live message processing stream before the defined “timeout” period passes, then the “best” action is taken based on the verdict provided by the URL analysis process.

主权项

1. A computing system implemented process for asynchronous analysis of URLs in messages in a live message processing environment comprising:
a live message processing system receiving a message addressed to a user computing system, the message including a URL; using one or more processors to extract the URL from the message while the message is in the live message processing system; using one or more processors to analyze the message and the extracted URL to identify one or more defined prioritization parameters while the message is in the live message processing system, the process being configured so that identification is at least partly based on the one or more identified prioritization parameters including whether evidence exists of the use of a URL shortening service with respect to the extracted URL; using one or more processors to prioritize the extracted URL for either expedited or standard processing based the analysis of the message and extracted URL, and any identified prioritization parameters, while the message is in the live message processing system; using one or more processors to transfer the extracted and prioritized URL to a URL analysis process for URL analysis; using one or more processors to stall the processing of the message by the live message processing system for a defined timeout period while the extracted and prioritized is being analyzed by the URL analysis process, the timeout period being adjustable by a user of the user computing system; using one or more processors to analyze the extracted and prioritized using the URL analysis process; periodically polling the URL analysis process to determine whether a determination has been made as to whether the extracted and prioritized URL is spam; as a result of the URL analysis process, using one or more processors to generate URL analysis results indicating whether the extracted and prioritized URL is “spam” or “not spam”; using one or more processors to determine if the extracted URL is prioritized as an expedited or standard URL, including consideration of whether the extracted URL is a shortened URL, wherein if the extracted URL is a shortened URL, the extracted URL is prioritized as an expedited URL, wherein an expedited URL is processed more quickly than a nonexpedited URL; if the extracted and prioritized URL is prioritized as an expedited URL, using one or more processors to transfer the URL analysis results associated with the extracted and prioritized URL to the live message processing system on an expedited basis; if the extracted and prioritized URL is not prioritized as an expedited URL and thus is prioritized as a standard URL, using one or more processors to transfer the URL analysis results associated with the extracted and prioritized URL to the live message processing system on standard basis; using one or more processors to resume the processing of the message by the live message processing system when either the timeout period has elapsed or when it is determined that the URL analysis results associated with the extracted and prioritized URL have been obtained; if the URL analysis results associated with the extracted and prioritized URL have been obtained within the timeout period, using one or more processors to process the message in accordance with the URL analysis results associated with the extracted and prioritized URL; and if the URL analysis results associated with the extracted and prioritized URL have not been obtained within the timeout period, using one or more processors to process the message in accordance with the data available at the time the timeout period elapses.