Mcafee, Inc.

Nick P Kelly

Guy Roberts

John Sargent

Chris Barton

Christopher Barton

Guy William Welch Roberts

Dallas Engelken

Karthik Umashankar

Paul D Walker

Hariprasad Mariswamy

A system, method, and computer program product are provided for reacting based on a frequency in which a compromised source communicates unsolicited electronic messages. In use, a source of at least two unsolicited electronic messages is identified as compromised. Additionally, a frequency in which the source communicated the unsolicited electronic messages is calculated. Furthermore, a reaction is performed based on the calculated frequency.

System, method, and computer program product for reacting based on a frequency in which a compromised source communicates unsolicited electronic messages

A method, system, and computer program product for processing email messages rescans emails messages that have already been scanned for spam and delivered to user inboxes with updated spam detection rules. This increases the accuracy of spam scanning and reduces the need for users to submit missed spam in emails that was not detected at the time the emails were received, but would subsequently be detected with newer anti-spam rules. A method of processing email messages comprises receiving email messages in a local inbox or in an inbox on an email server, or both, the received email messages having been scanned using spam detection rules to determine whether or not they include spam, obtaining updated spam detection rules, and rescanning at least some of the received email messages using the updated spam detection rules to determine whether or not they include spam.

Increasing spam scanning accuracy by rescanning with updated detection rules

A method and computer program product prevent false positives from occurring by reducing or preventing legitimate web site content from triggering matches to phishing black lists, but provides time and cost savings over manual review of black lists. A method implemented in a computer system for detecting false positives among a plurality of search patterns of web sites that include illegitimate content comprises accessing a first page of a legitimate web site, obtaining all links included in the first page, for each link included in the first page that points to a page on the web site, determining whether the link matches at least one of the plurality of search patterns, and for each link that matches the search pattern, indicating that the search pattern is a false positive.

Automatically verifying that anti-phishing URL signatures do not fire on legitimate web sites

Growing community of inventors

Milton Keynes, United Kingdom

Nick P Kelly