|   |
March 15, 2006
|
| How Does TrustedSource Work? TrustedSource analyzes billions of messages per month from CipherTrust's global enterprise network of over 4,000 sensors located in enterprises and government institutions. This allows TrustedSource to score IP addresses anywhere on the spectrum of good to bad, depending on both sender history and message characteristics. Senders are graded on very granular scores allowing precision in determining whether a sender is bad, suspicious, or good. CipherTrust IronMail appliances report back to TrustedSource on all mail flow they are seeing giving TrustedSource a real-time view of worldwide mail traffic. Any deviations from predicted behavior are picked up by TrustedSource and if a new reputation score is derived for a given sender, that new score is immediately available to all IronMail units in the field. Rather than give the benefit of the doubt to unknown or unfamiliar senders, the system takes a "guilty until proven innocent" approach to reputation scoring. By examining the frequency of e-mail activity from a particular IP address and the quality of the sent messages (via IronMail's Message Profiler), TrustedSource assigns the address a probability of being a spammer or zombie machine that has been taken over by hackers and used to send spam, viruses or other unwanted messages. Based on information gathered from IronMail units in the field, CipherTrust identified approximately 50 million IP addresses that send approximately 70% of all e-mail on a daily or nearly daily basis. The other 30% comes from IP addresses that have not been previously encountered, and of those messages, over 95% are spam, viruses or other undesirable messages, leading CipherTrust researchers to the conclusion that IP addresses that are encountered for the first time are more than likely zombie machines. CipherTrust typically identifies over 170,000 new zombies a day using this principle. |
|
|
Custom Search
|
Subscribe |
Link to Us |
Syndicate |
Bookmark Us |
RSS feed |
Privacy Policy |
Contact Us
Copyright © 2005-2009
Interlink Enterprise Computing. All rights reserved.
All company logos & trademarks displayed on this site belong to their
respective owners