Spam Blocker Information

The Anti Spam Challenge - Minimizing False Positives


Email is the quintessential business communication tool, so when it doesn't work like it's supposed to, business suffers. Anti spam software is designed to protect your inbox from unwanted messages, but unless your system is properly trained even the best software misses the mark and flags legitimate messages as spam. These messages are referred to as "false positives."

While consumer and ISP anti spam products focus on blocking messages and even consider some false positives acceptable, businesses require anti spam solutions that treat their messages as very valuable. Failing to receive critical messages in a timely fashion can do irreparable damage to customer and partner relationships and cause important orders to be missed, so eliminating false positives while maintaining high anti spam accuracy is paramount to any enterprise anti spam solution.

What causes false positives?

Different anti spam solutions utilize different methods of detecting and blocking spam. Anti spam software typically uses content filtering or Bayesian Logic, an advanced content filtering method, to score each email, looking for certain tell-tale signs of spammer habits such as frequently used terms like "Viagra" or "click here." Other anti spam solutions reference blacklists and whitelists to determine whether the sender has shown spammer tendencies in the past. A false positive can occur when a legitimate sender raises enough red flags, either by using too many "spam terms" or sending from an IP address that has been used by spammers in the past.

Minimizing False Positives

Although it takes a person only a moment to process a message and identify it as spam, it is difficult to automate that human process because no single message characteristic consistently identifies spam. In fact, there are hundreds of different message characteristics that may indicate an email is spam, and an effective anti spam solution must be capable of employing multiple spam detection techniques to effectively cover all bases.

A comprehensive anti spam approach involves examining both message content and sender history in tandem. By using a reputation system to evaluate senders based on their past behavior, a more accurate picture of their intentions and legitimacy can be discerned, and a solution's false positive rate can be further lowered. Has the sender engaged in spamming, virus distribution or phishing attacks in the past? If not, the likelihood of their message getting past the email gateway just went up, and the chances of a false positive declined accordingly. If they have, an effective reputation system knows and flags the message.

Self-Optimization

In order to be most effective, anti spam solutions must learn based on a recipient's preferences. While most of us prefer not to receive emails containing the term Viagra, some medical organizations might need to receive these emails in order to process patient data. In order to best learn your organizational preferences, anti spam solutions should put filtered emails into a quarantine that allows users to review and make decisions as to whether a particular message is spam. Making this quarantine available to the end-user lowers the administration costs and increases the accuracy of the anti spam system.

Each time a user makes a decision about whether a particular email is or is not spam, the system becomes more personalized and intelligent about filtering email for that individual in the future. Over time, users find that they rarely need to review their quarantines anymore because the system has learned how to identify messages that are important to that user.

Don't throw the baby out with the bathwater

In conclusion, it is imperative that false positives be kept to an absolute minimum for business users. Although consumers may have more patience with incorrectly blocked email, businesses cannot afford these types of problems. An effective, accurate anti spam solution aggregates multiple spam detection technologies, combining the benefits of each individual technique to stop spam while minimizing false positives. It also puts suspected spam into a quarantine that is available to end-users, and learns how to better identify spam in the future.

Dr. Paul Judge is a noted scholar and entrepreneur. He is Chief Technology Officer at CipherTrust, the industry's largest provider of enterprise email security. The company's flagship product, IronMail provides a best of breed enterprise anti spam solution designed to stop spam, phishing attacks and other email-based threats. Learn more by visiting http://www.ciphertrust.com/products/spam_and_fraud_protection/ today.


MORE RESOURCES:

Help Net Security

WatchGuard unveils network security 'X-factor'
VNUNet.com, UK - Sep 16, 2008
Customers can choose spamBlocker with virus outbreak detection, WebBlocker for URL and content filtering and WatchGuard Gateway Anti-Virus and intrusion ...
WatchGuard Previews New High Performance Network Security ... Earthtimes (press release)
all 12 news articles


EarthLink announces expansion of High-Speed Internet in Los Angeles
Trading Markets (press release), CA - Sep 11, 2008
... and EarthLink's TotalAccess Software that provides computer security features, including AntiVirus, Virus Blocker, spamBlocker and Firewall protection. ...
EarthLink expands in a tough broadband market in Los Angeles Los Angeles Times
all 2 news articles


EarthLink Launches High-Speed Broadband Service in Dallas and ...
RedOrbit, TX - Sep 11, 2008
... and EarthLink's TotalAccess software that provides computer security features, including antivirus, virus blocker, spamBlocker, and firewall protection. ...


Government e-mail system was down
Royal Gazette, Bermuda - Oct 2, 2008
By Robyn Skinner Government e-mail addresses and its website were down on Monday and Tuesday this week because of a spam blocker component. ...


Ashampoo WinOptimizer 5.09
PC Authority Business Centre, Australia - Oct 1, 2008
There's a StartUp Tuner for controlling which programs are launched when Windows boots, an "IP Spam Blocker" and more. You can defragment your hard drive as ...


Bleacher Report

College Football Line Moves for Week 5, 9/27/08
Bleacher Report, CA - Sep 27, 2008
I've emailed out my pick for Georgia-Alabama so if you haven't received it either check your spam blocker or send me an email and I'll resend it. ...


Automattic Acquires Comment Plugin IntenseDebate
ReadWriteWeb, CA - Sep 23, 2008
Automattic promises that IntenseDebate will remain platform agnostic, just like Aksimet, Automattic's comment spam blocker. ...


WatchGuard Previews Threat Management Network Security Appliance
TMCnet - Sep 18, 2008
The WatchGuard XTM 1050 supports optional security service subscriptions, such as WatchGuard spamBlocker with virus outbreak detection, ...


WatchGuard unveils WatchGuard XTM 1050 network security appliance
Trading Markets (press release), CA - Sep 17, 2008
The new product will reportedly offer optional security service subscriptions, including WatchGuard spamBlocker with virus outbreak detection, ...


Protecting your information
UNM Daily Lobo (subscription), NM - Sep 16, 2008
"We have a really good spam blocker here at UNM, and it does block thousands of spam e-mails per day," Baca said. "But once in a while, some does get ...

Spam-Blocker - Google News

home | site map
© 2006