|
ANTI-VIRUS - FILTERING:
Effektive Scan Technology:
IKARUS Managed Security Services use the IKARUS T3 Scanner, that
reaches almost 100% of virus recognition rate. It scans for computer
viruses, Trojans, worms, active-x, scripts, malicious javaspplets,
etc.
Second Level Scanner:
Should an anti-virus scanner have already been installed in your
company, the IKARUS Managed Security Services are the ideal solution
as the second level scanner - as 4 eyes see more than just 2!
Virus and configuration support:
IKARUS Kunden naturally receive support on matters of configuration
of the IKARUS Managed Security Services , as well as support on
problems with computer viruses Mondays to Fridays from 08:00 to
18:00.
|
SPAM - FILTERING:
Protection for bandwidth and no lost of time.
Over 50% of Spam mails have recently flooded the entire e-mail
traffic. This percentage will enormously increase in the future.
IKARUS Managed Security Services can identify and delete up
to 98% of all Spams. This means that spam is filtered out
before it reaches your gateway. This will not only help you
and your employees to save time, but at the same time it releases
your internet connections. Our SPAM
CALCULATOR gives information on working time saved.
|
|
|
Spam Filtering Technologies:
IKARUS Managed Security Services offer the possibility to filter
out spam most effectively. Using different methods and self learning
algorithms, it examines e-mails according to many rules. Spam will
be detected and treated in accordance with your settings (delete,
mark or redirect). The sensitivity levels of the spam filter can
be set from low to high in 9 different levels. Additionally rules
and sensitivity levels can be defined to help you increase spam
filtering. Detailed information of the functionality of our implemented
technologies is obtainable in our "AntiSpam Technology"folder
or on our website: www.mymailwall.at
Verwendete Technologien:
- Heuristic Analysis
The heuristic analysis is a rule-based scan technology which
recognizes certain characters of an E-Mail. These characters
indicate Spam mails e.g. when a mail contains a remove link
or a certain words such as "VIAGRA" or alphabetical
symbols of foreign languages etc. These indicators will be sorted
into different "bad categories". If the sum of this
"bad categories" exceeds a certain point, the mail
will be identified as Spam.
- Bayer's Text Analysis
The Bayer's Analysis traces statistics which is resulted from
analysing a lot of Spam mails. This mechanism is a self-learning
method and will get more intelligent with the number of mails
it analyses. The statistics will be used as a reference of rules
for other new E-Mails. The Bayer's Analysis is considered one
of the most powerful mechanisms for Spam recognition. At the
same time it delivers the least "false positive" rate.
("False positives" are regular E-Mails which are classified
as Spam. The more strict a heuristic Spam filter is configured,
the higher the "false positive" rate become.). Combined
Spam filtering parameters are therefore more reasonable. This
means that mails with a very high probability of being identified
as Spam can be deleted immediately. Whereas others with low
Spam rating should be only marked (tagged) and double-checked
by the final users.
- Lexical Text Analysis
This analysing form examines the content of an E-Mail and filters
text strings (e.g. Sales offers, Invitation to visit a website
etc.). These text strings will be linked with Bool's Operators.
(OR, AND, NOT etc.) and analysed if it is the matter of such
offers. If this is the case, the E-Mail will be qualified as
Spam.
- Spam Database
Spammails are slightly changed only every once in a while (either
upon each package sent or at each E-mail address). In order
to identify such poly-morpheme Spam mails, Hash Signatures from
E-Mails received are extracted and compared with signatures
of Spam mails in a updateable database. The Variations of Spam
mails can be recognized by Hash Signature System. The filtering
of different special characters, data and tags, which Spam mails
aim to avoid in anti-Spam programs, out of suspicious Spam mails
increases the effectiveness of this system.
To keep the database updated, Hash Signatures are always added
using a so-called "real time Spam Collectors", which
gather E-mail addresses of Spam mails .
- Black Lists and White Lists
Sometimes it is just necessary to specify such RBL lists. Though
this technique is a little out of date as Spammer can pick out
and change any random E-mail addresses for most valid domains,
there are still some certain domain names that are used by Spammer
to send out Spam mails. Those domain names can be listed in
the black list to prevent Spam.
White list is a counterpart of black list. On this list E-mail
addresses and domains will be administered which are aimed for
sending higher numbers of mails such as subscribed mailing lists
or newsletter. Those e-mail addresses can also be added that
are not exploited by Spammers, but belong to a domain which
is normally misused by Spammers as Open Relay to send out Spam
mails.
- Subject Line Analysis
A lot of Spam mails resemble each other in the subject line.
By means of a sample list which contains typical subject lines
of Spam mails, it is possible to identify and filter out Spam.
("Save Money", "Viagra online" etc.
- Protection against Directory Harvesting Attacks
The so-called "attack directory" is used by Spammers
to get access to valid E-Mail addresses of a domain. E-Mails
will be sent to many different addresses to prove whether the
receiving mail servers return an error message. If this is not
the case, the E-mail address is valid and will be added to the
Spam mailing lists. Should such an directory harvesting attack
be registered, all E-mails from this sender will be blocked.
-
Mailbombing Protection
Denial of Service (DoS) Attack is a form of Mail Bombing
in which it is attempted to send mass E-mails over a Dictionary
Mailer to a domain. This protection regulates the E-mail traffic
to avoid a congestion. It means that both number of open mail
session and mails in spool are monitored. A method preferred
by Spammers is sending out E-mails with multiple receivers.
Mail servers of victims are use das multiplicators. To protect
against this attack, IKARUS Spam Filtering predefines a maximum
limit for allowed receivers.
- Anti Spoofing
Spammers send their E-Mails from external domains, but use
internal senders' addresses to disguise themselves.
Examples:
- A Spam mail to mike@yourcompany.com could disguise in mikesfriend@yourcompany.com
as sender. This internal sender address can be either a valid
or an invalid address of the domain.
- The same address for sender and receiver can be used as
if users would send a mail to themselves
Email spoofing is reliably recognized and blocked by IKARUS
Spam Filtering.
|