Non-transitory computer-readable medium and email processing device for misrepresentation handling
An email misrepresentation handling process is executed for an email in a case of a mismatch between first sender information detected by a first detection from a body text or a subject of the email, and second sender information detected by a second detection from a header of the email.
1. A non-transitory computer-readable medium storing a program causing a computer to execute a process for processing email, the process comprising:
comparing first sender information detected from a body text or a subject of an email with second sender information detected from a header of the same email; and
executing a misrepresentation handling process for the email in a case of a mismatch between the first sender information and the second sender information.
2. A non-transitory computer-readable medium storing a program causing a computer to execute a process for processing email, the process comprising:
executing a first detection of detecting first sender information from a body text or a subject of an email;
executing a second detection of detecting second sender information from a header of the same email;
comparing the first sender information with the second sender information; and
executing a misrepresentation handling process for the email in a case of a mismatch between the first sender information and the second sender information.
3. The non-transitory medium according to claim 2 , wherein
the first sender information is a first sender domain, and the second sender information is a second sender domain, and
executing the first detection includes detecting an organization name of a sender from the body text or the subject of the email, and from the organization name of the sender, referencing a correspondence table between organization names and domains, and detecting the first sender domain.
4. The non-transitory medium according to claim 2 , wherein
the first sender information is a first sender organization name, and the second sender information is a second sender organization name, and
executing the second detection includes detecting a domain of a sender from the header of the email, and from the domain of the sender, referencing a correspondence table between organization names and domains, and detecting the second sender organization name.
5. The non-transitory medium according to claim 2 , wherein
the misrepresentation handling process is executed for the email in a case of a mismatch between first sender information detected from a first location inside the body text or the subject of the email, and second sender information detected from a second location different from the first location inside the body text or the subject.
6. The non-transitory medium according to claim 2 , wherein
the first sender information and the second sender information are both sender domains, or are both organization names of a sender.
7. The non-transitory medium according to claim 2 , wherein
the second sender information is information detected from one or more of any of a From field, a Reply-To field, a Return-Path field, and a Received field of the email.
8. The non-transitory medium according to claim 2 , wherein
the misrepresentation handling process executes any one of, or a combination of, presenting a warning indicating a misrepresentation, presenting a reason for determining the misrepresentation, deterring opening of the email, and notifying an administrator.
9. The non-transitory medium according to claim 2 , wherein
in a case in which there is a location in which the first sender information is not detected successfully, and in a case of a mismatch between the first sender information detected from another location and the second sender information, the misrepresentation handling process presents an indication of a possibility of a misrepresentation.
10. An email processing device comprising:
a first detector configured to detect first sender information from a body text or a subject of an email;
a second detector configured to detect second sender information from a header of the same email;
a misrepresentation determination processor configured to compare the first sender information with the second sender information; and
a misrepresentation handling processor configured to execute a misrepresentation handling process for the email in a case of a mismatch between the first sender information and the second sender information.