Introduction to the Alibaba Mail anti-spam system

更新时间:
复制 MD 格式

Product overview

The Alibaba Mail anti-spam system is a large, self-developed system designed to serve hundreds of millions of users and maintain a secure email environment. The system analyzes new spam samples in real time and uses advanced data analytics, artificial intelligence (AI) algorithms, and multiple inference rules to identify suspicious senders, behaviors, and content. This process improves the overall spam interception rate.

The system also uses a phishing database and an anti-virus scanning engine maintained by the Alibaba security team to perform in-depth analysis and targeted removal of phishing and virus emails. Each year, the system blocks phishing, fraud, and virus emails for tens of thousands of users, preventing tens of millions in financial losses.

Webmail includes a spam reporting feature. When you report a spam email, our anti-spam team analyzes the data to optimize the algorithms. Your feedback helps improve the machine learning model and creates a closed-loop filtering system.

Product features

2.1 Attack prevention and anomaly detection

The system blocks abnormal attacks and sending behaviors using rate limiting, feedback from multiple Real-time Blackhole Lists (RBLs), and dynamic adjustments to whitelists, blacklists, and greylists. This protects the mail system from attacks.

  • Multi-frequency protection

  • Dynamic greylists

  • Whitelist and blacklist checks

  • RBL: Incorporates results from multiple world-renowned anti-spam consortiums.

2.2 Identity recognition

Multiple sender domain validation methods are used to identify the sender's identity. This process ensures the authenticity of the domain name and blocks forged phishing and fraud emails.

2.3 User behavior and email content detection

The system performs multiple checks based on the sender's historical behavior and the email's content to block unwanted bulk emails and emails with unfriendly content.

  • Behavior checks

  • Email fingerprinting

  • Email keyword checks

  • Hundreds of spam scenario rule checks

2.4 Phishing and virus email detection

  • Phishing: The system uses a phishing database maintained and updated by the Alibaba Group security team for specialized detection of phishing and fraud.

  • Virus: The system uses the Alibaba Security Shendeng Cloud anti-virus scanning engine. This engine supports the detection of tens of millions of files per day and effectively blocks virus emails.

2.5 Intelligent correction

A large-scale reputation system is built based on users' historical sending behaviors. This system, combined with hundreds of rules for normal emails, corrects potential errors after multilayer filtering. This process reduces false positives and ensures the accuracy of email interception.

image

2.6 Prevent phishing emails caused by compromised accounts

  • Enable two-factor authentication and app-specific passwords

The Alibaba Mail anti-virus and anti-spam gateways block most spam and phishing emails from external domains. However, if a user's account is compromised, attackers can use it to send phishing emails. This can lead to severe information leaks and financial losses.

Attackers primarily use credential stuffing and weak password guessing to crack user passwords. They then use the stolen account and password to send spam and phishing emails using the Simple Mail Transfer Protocol (SMTP).

Therefore, preventing account and password leaks is the key to eliminating these threats. Alibaba Mail supports features such as two-factor authentication, app-specific passwords, and access policies. These features prevent attackers from sending spam even if they have stolen a user's account and password.

image

image

image

image

image

Benefits

  • Powerful spam detection: A multilayer filtering mechanism effectively prevents spam from reaching your inbox.

  • Secure email communication: High accuracy in email filtering prevents email loss and ensures the successful delivery of legitimate emails.

  • Global server deployment: Multi-node deployment and smart routing ensure smooth email delivery to and from regions outside China.

  • Comprehensive monitoring: A dynamic data reporting system with dedicated monitoring ensures that issues are detected and handled promptly, providing a seamless user experience.

  • Large model sample library: Years of sample collection have created an extensive library for our models.

  • Advanced fingerprinting technology: Emails are broken down into multiple fingerprints. The system uses a large fingerprint database and rate limiting to effectively block spam.

  • The system incorporates data from world-renowned anti-spam consortiums.

  • The system relies on Alibaba's professional security phishing database and anti-virus scanning engine to effectively block phishing, fraud, and virus emails.

  • High-quality after-sales service: We follow the "Customer First" principle and provide professional after-sales service to every user.

  • The system's technology is protected by multiple national invention patents.