IronPort Systems is rating weblinks in e-mail to better filter out junk messages, including those with links to malicious sites.
The company has added IronPort Web Reputation technology to its anti-spam appliances. The new technology examines about 45 attributes of websites linked in an e-mail message, to assess whether a message might be spam.
By submitting your email address, you agree to receive emails regarding relevant topic offers from TechTarget and its partners. You can withdraw your consent at any time. Contact TechTarget at 275 Grove Street, Newton, MA.
The technology is a response to new tactics employed by spammers. Int he past spam filters have relied on looking at content. Now, spammers are removing all the meaningful content and simply including a link.
Sophisticated attacks are using e-mail links to guide users to malicious websites that can infect them with rogue code which can turn their machines into spam distributors.
IronPort's Web Reputation technology conducts a number of checks on the web link included in an e-mail and gives the link a score. That number, along with checks such as sender reputation and content of the e-mail, will determine whether an e-mail can pass through IronPort’s appliance or be blocked.
IronPort checks when a domain has been registered, where a website is hosted, which Domain Name Server (DNS) it uses, and how many times it has been linked to e-mail.
Spammers tend to use recently-registered domain names, use hosted locations for their sites, and re-use DNS servers.
The Web Reputation technology is now part of the IronPort Anti-Spam system. Pricing for IronPort appliances starts at £1,800 for 100 users.