基于增量学习算法的校园网垃圾邮件检测模型  

Spam detection model of campus network based on incremental learning algorithm

作　　者：陈斌[1] 东一舟[1] 毛明荣[1] 

机构地区：[1]南京师范大学信息化建设管理处,南京210023

出　　处：《计算机应用》2017年第1期206-211,216,共7页journal of Computer Applications

基　　金：南京师范大学数字校园建设研究项目(2013JSJG069)~~

摘　　要：针对大量垃圾邮件对用户带来困扰的问题,提出了一种增量被动攻击学习算法。该方法基于半年时间的对本校校园网内邮件宿主机上所发起的简单邮件传输协议(SMTP)会话日志的采集,针对会话中记录的投递率状态及多种类型的失败消息进行了宿主机行为分析,最终达到有效地适应被检测垃圾邮件源宿主机对最近邮件分类行为的目的。实验结果表明,在执行了若干回合分类策略的调整后,该检测的准确度可以达到94.7%。该设计可以有效地检测内部垃圾邮件宿主机行为,继而从根源上抑制了垃圾邮件的产生。Concerning the problem brought by a large number of spam, an incremental passive attack learning algorithm was proposed. The passive attack learning method was based on the Simple Mail Transfer Protocol （SMTP） session log initiated by the email host in the campus during half a year. Analysis on the status of delivery rate and many types of failure message of the host behavior in the session record was conducted, and the effective adaptation was ultimately achieved by detecting spam source host behavior on the recent email classification. The experimental results show that after implementing several rounds of classification strategy adjustment, the detection accuracy of the proposed model can reach 94.7%. The design is very useful to effectively detect internal spam host and control the spam from the source.

关 键 词：垃圾邮件宿主机 简单邮件传输协议会话 增量学习 分类器 失败信息 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]