钓鱼邮件防范体系探讨  

Phishing email prevention system

作　　者：顾海艳[1] 陶慎亮[1] 滕丽萍[1] 

机构地区：[1]江苏警官学院,江苏南京210031

出　　处：《解放军理工大学学报（自然科学版）》2017年第3期238-242,共5页Journal of PLA University of Science and Technology(Natural Science Edition)

基　　金：江苏省公安厅课题基金资助项目(2016LX008);"十三五"江苏省重点建设学科建设工程资助项目(苏教研[2016]9号);江苏高校品牌专业建设工程资助项目(苏教高[2015]11号)

摘　　要：针对钓鱼邮件带来的严重网络安全问题和社会危害,鉴于当前国内外反钓鱼邮件主要技术存在的问题,通过分析钓鱼邮件的攻击过程及主要特征,结合黑名单过滤、白名单过滤、贝叶斯过滤3种技术各自的优点,提出了组合运用这3种技术实现对钓鱼邮件高效过滤的新思路,实现具有智能学习能力的有效过滤,同时降低钓鱼邮件的误报率和漏过率。研究提出了全面推行安全协议、正确使用安全管理软件的邮件服务器管理策略,以及用户使用邮件的安全方法,初步建立了一套在安全防范技术、安全管理策略、安全使用方法3方面着手的、较为完善的钓鱼邮件防范体系。Given the serious network security problem and social harm caused by phishing email, as well as the current status of domestic and foreign anti-phishing email technology research, and based on the analy- sis of the advantages of Black list filtering, White list filtering and Bayesian filtering, a new idea of using the three technologies mentioned above was put forward to realize an effective filtration for phishing emails by analyzing phishing attack process and its main characteristics, which can not only realize the effective filtration with intelligent learning ability, but also lower the false alarm rate and leakage rate. Meanwhile, a managing strategy for mail server was presented which implements the security protocol and employs proper security management software, as well as a secure using method for users. A set of relatively com- prehensive system of phishing e-mail prevention which consists of security technology, safety management strategy, safety use method was preliminary established.

关 键 词：钓鱼邮件 过滤技术 电子邮件安全协议 防范体系 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]