METHOD AND SYSTEM FOR BLOCKING SOPHISTICATED PHISHING MAIL BY MONITORING INNER AND OUTER TRAFFIC

摘要

The present invention relates to a method for blocking sophisticated phishing mail by monitoring inner and outer traffic, and includes: a mail-structuring step (S10) for extracting/storing data packets related to the mails by monitoring the traffic transmitted/received in the inner network and analyzing each data packet to process each mail data by a constituting item including a URL included in a mail to generate structured mail data; a threat detection step (S20) for extracting a URL included in a mail from the structured mail data in the mail-structuring step (S10) to check if there are threats to the mail data based on the extracted URL; a threat-managing list-generating step (S30) for sorting the existence of a threat to a website corresponding to the URL included in the mail according to the check result of the threat detection step (S20) to generate a threat-managing list; and a blocking list-making step (S40) for making a blocking list based on the threat-managing list; characterized in that the threat-managing list-generating step (S30) is divided into an external webmail service part and an organization's mail service part, and separately generates a threat-managing list for the outer webmail service and for the group mail service which the blocking list-making step (S40) cross-references both threat-managing lists to make a blocking list. [Reference numerals] (S10) Enrollment of composer or songwriter cooperators;(S20) Weighting set for each set for composer or songwriter;(S21) Relation analysis classification list;(S22) Inside security level classification list;(S30) Draft of composer or songwriter;(S40) Enrollment of composer or songwriter;(S50) Modifying registered writing-lyrics or writing-song?