Detection of unwanted messages (spam)
In a telecommunications network, method and apparatus for blocking unwanted messages (spam). Messages are first examined by a fast process which uses rules and data tables to determine whether a message can be passed or is potentially a spam message. If the message is potentially a spam message, the message content is analyzed by a deep process. Advantageously, most messages can be passed or blocked quickly and extensive data processing is required only for the few messages which cannot be categorized by the fast process.
1. In a telecommunications network a method of detecting unwanted messages (spam) comprising the steps of:
transmitting messages to a spam detection system;
receiving a message in a fast process system of said spam detection system, said fast process system using rules and data tables to determine whether said message is spam or non-spam;
if it is determined in said fast process system that said message is non-spam, sending said message toward a destination;
if it is determined in said fast process system that said message may be spam, sending said message to a deep process for analyzing message content;
based on analysis by said deep process of said message content, determining whether said message is spam; and
if said message may be spam, blocking said message from being transmitted toward a destination.
2. The method of claim 1 wherein said deep process system further performs the steps of:
detecting new patterns of spam messages; and
responsive to said detecting, updating rules of said process.
3. The method of claim 1 further comprising the step of:
if said deep process system cannot determine whether a message is spam, forwarding said message to a service bureau for analysis by a human operator.
4. The method of claim 3 further comprising the step of:
said human operator modifying rules of said fast process.
5. In a telecommunications network, apparatus for detecting unwanted messages (spam) comprising:
means for transmitting messages to a spam detection system;
means for receiving a message in a fast process system of said spam detection system, said fast process system using rules and data tables to determine whether said message is spam or non-spam;
means for determining in said fast process system that said message is non-spam, and for sending said message toward a destination;
in said fast process system, means for determining that said message may be spam, and for sending said message to a deep process for analyzing message content;
means for determining whether said message is spam based on analysis by said deep process of said message content; and
means for blocking said message from being transmitted toward a destination if said message may be spam.
6. The apparatus of claim 5 wherein said deep process system further performs the functions of:
detecting new patterns of spam messages; and
responsive to said detecting, updating rules of said process.
7. The apparatus of claim 5 further comprising:
means for forwarding said message to a service bureau for analysis by a human operator if said deep process system cannot determine whether a message is spam.
8. The apparatus of claim 7 further comprising:
means for permitting said human operator to modify rules of said fast process.