A Method for Using One or More Spy E-mail Accounts for Detecting Malicious E-mail Activity
Publication Date: 2014-Jun-16
The IP.com Prior Art Database
A method is disclosed for using one or more spy e-mail accounts for detecting malicious activity. In order to encourage malicious parties in compromising the spy e-mail accounts, the spy e-mail accounts can be made non-distinguishable from normal accounts. For instance, this can be done, by adding the spy e-mail accounts to the contact lists of normal accounts or by having the spy e-mail accounts emulate the same activities as normal e-mail accounts. In one embodiment, spamming behavior can be detected based on identifying unsolicited e-mail received in the spy account, from another account outside a cluster incorporating the spy account.