| 摘要 |
PURPOSE: A method for detecting botnet transmitting a spam mail and a system thereof are provided to detect the botnet from received mails, thereby preventing the damage caused by the botnet. CONSTITUTION: When a mail is received, mail monitoring servers (30-1~30-m) upload the mail and an internet protocol of a transmitting terminal. A main server (50) compares mails which are uploaded from the mail monitoring servers. When the number of countries according to internet protocols of the number of monitoring object transmitting terminals, which transmits the same mail, exceeds a constant number, the main server processes the monitoring object transmitting terminals by using botnet. The main server processes the whole transmitting terminals which transmits the same mail by using the botnet and provides related information to the mail monitoring servers. [Reference numerals] (50) Main server; (AA) Network |
