恶意邮件检测技术研究

Research on Malicious E-mail Detection Technology

随着个人隐私信息的大量泄露,攻击者可以通过收集攻击目标的相关信息制作出信息关联度较高的邮件用于传播恶意代码和APT攻击。传统的垃圾邮件检测方法大多依赖于邮件中提取的静态特征,然而对于复杂的、有针对性的新型恶意邮件的检测有很大的局限性。文章深入分析了近年邮件安全威胁的发展变化,发现了日益突出的恶意邮件安全问题,总结了现有的垃圾邮件检测技术,同时指出了恶意邮件检测技术存在的不足并给出了未来研究方向。

With the large leakage of personal privacy information, attackers can collect relevant information of the attack target, thereby creating an E-mail with high relevance to the recipients5 information to spread malicious code and APT attacks. Most of the traditional spam detection methods rely on the static features extracted from the E-mail, however, this has great limitations for the detection of complex and targeted new types of malicious E-mail. This paper thoroughly analyzed the development and changes of E-mail security threats in recent years, discovered the increasingly prominent issue of malicious E-mail security, then summarized the existing spam E-mail detection technology, and pointed out the inadequacies of malicious E-mail detection and proposed related improvement measures, finally introduced future research directions, and pointed out the inadequacies of malicious E-mail detection and proposed the future research directions.