Cloud network in anti-spam

The evolution of the cloud

This newspaper has been dedicated to the study of cloud computing, cloud computing itself is a dynamic extension of the operation mode, through the network will be a huge operation of the process automatically split into countless smaller subroutines, and then to a number of servers composed of a large system, after the search, operation analysis will be processed results back to the users. With this technology, service providers can handle tens of millions of millions of messages in a matter of seconds. At present, cloud computing is usually based on virtual patterns, which provide computing, storage, bandwidth and services to users through the Internet.

It should be said that after the advent of cloud computing, to make up for the previously widely proposed "software as a service" required by the technology gap, can be embodied in the concept of information architecture to form the concept of cloud security. The two major characteristics of cloud security are "global joint Threat Defense" and "Real-time online update protection". Global joint Threat defense collects massive amounts of data from around the world, using its powerful computing power to provide early assessment and early warning of unknown threats; real-time online update protection is the use of cloud technology, the most real-time security updates back to the client, eliminate the time window restrictions, reduce the burden of customer maintenance management.

Cloud Security and Spam

According to research by many security companies, the biggest feature of spam is that hackers send the same content to tens of hundreds of of millions of recipients. At present, the industry's view is that the best way to solve spam is to use cloud security technology, to build a strong analytical platform to collect and monitor the global mail delivery Behavior, trends, features and other data, real-time detection of sudden attacks on the network, to shorten the response time of the threat outbreak of mail, Allow users to get the most real-time updates and protection to reduce the chance of a threat invasion.

In fact, two years ago, the security community has put forward the "Cloud Security for email" concept, the development of e-mail-oriented cloud safety system, through this service to establish a global mail joint protection network. The e-mail cloud security system promotes the traditional spam defense technology, such as RBL blacklist, classification database, Bayesian algorithm, single user heuristic learning and so on, to promote the cloud security joint protection architecture, to build a powerful server group dynamic analysis platform by cloud technology, to obtain the necessary resources dynamically and to carry out 7* 24-hour automated operation analysis.

Mainstream technology

In the e-mail cloud security system, it is most common to use Sender Reputation evaluation (Sender reputation) technology. The technology uses cloud computing's dynamic analysis capabilities to calculate the sender's credit score in real time. The system will analyze the unknown sender according to the behavior pattern, activity range and historical record of the email, and verify repeatedly. The technology can block malicious emails in the cloud based on the sender's reputation, preventing security threats such as those spread by zombie computers or botnets from entering the network.

In addition, in the E-mail cloud security architecture, Honeypot technology is also favored by the security vendors. This technology is part of a world-class spam collection system that can collect millions of new or variant spam samples a day, through a large number of decoy Accounts in the world, covering multiple languages and cross-border sources.

When a brand new email threat sprang up, the threat-aware system in the email Cloud security system (Threat Sensor System) detects abnormal mail behavior immediately after a quick analysis of the cloud network, submitting defensive measures to automated validation of the Junk Mail Processing center within the cloud network. After a large number of samples of pressure and misjudgment test, the official release of anti-spam features database updates, real-time defense of mail threats.

In general, the current use of e-mail cloud security system to defend spam has become the mainstream, more and more security vendors will participate in it, and the construction and development of cloud network to contribute power.