A METHOD FOR DETECTING MALICIOUS CODE IN EMAIL

摘要

The present invention is directed to a method for detecting presence of malicious code in e-mail messages of an organization, and a system therefor. The method comprising: gathering information related to incoming and/or outgoing e-mail messages of the organization (202); analyzing the gathered information in order to find common denominators of the gathered information that may indicate about the presence of malicious code within the messages (203); determining the suspicion of presence of malicious code within the e-mail messages according to the found common denominator, and/or according to the combination of the found common denominators (204); and upon positively determining a suspicion of presence of malicious code within the e-mail messages, activating an alerting procedure (205).