基于蜜罐系统的垃圾邮件采集技术研究

Research of spam acquisition technology based on the honeypot

当前垃圾邮件过滤技术主要采用基于内容和规则的过滤方式,对于这种过滤方式必须具有大规模的样本知识库才能提高邮件过滤的正确性。然而当前邮件样本知识库存在内容单一、实时性差、覆盖范围有限的特点,本文针对现有知识库不足提出了一种新型的基于蜜罐系统的垃圾邮件采集技术,通过在蜜罐环境中,配置开放转发邮件服务器、开放代理服务器实现垃圾邮件的有效采集,最后,在实验环境中对该采集系统进行了测试。

Recently, the spam filtering technology, which mainly based on the rules of the content and filtration method for this kind of filtration method, must have a large of sample base to improve the correctness of the mail filtering. However, there exist some shortcomings of the current mail sample base, such as simplistic contents, bad real-time performance, limited coverage. This paper presents a new technology to acquisition mail through the honeypot environment. In the lab environment, we configure the open relay mail server and the open proxy server to acquisition the mail.