Alibaba Mail anti-spam system

1. Product overview

The Alibaba Mail anti-spam system is a proprietary platform built for hundreds of millions of users. It analyzes spam samples in real time with AI algorithms and multi-layered inference rules to identify suspicious senders, abnormal behavior, and malicious content.

The system also uses a phishing database and virus scanning engine maintained by the Alibaba security team for targeted phishing and virus detection. Each year, it intercepts phishing, scam, and virus emails for tens of thousands of users, preventing millions in financial losses.

The webmail interface includes a spam reporting feature. Reported emails feed back into the machine learning model, continuously improving detection accuracy.

2. Features

2.1 Attack prevention and anomaly detection

The system uses rate limiting, Real-time Blackhole Lists (RBLs), and dynamic blocklist/allowlist/greylist adjustments to intercept abnormal sending behavior and protect against attacks.

• Multi-frequency protection

• Dynamic greylisting

• Blocklist and allowlist checks

• RBL checks against multiple globally recognized anti-spam consortiums

2.2 Sender identity verification

The system validates sender domains through multiple methods to verify identity and intercept forged phishing emails.

2.3 Behavior analysis and content detection

The system analyzes sender history and email content to intercept bulk spam and malicious emails.

• Behavior analysis

• Email fingerprinting

• Content keyword filtering

• Hundreds of spam scenario rules

2.4 Phishing and virus email detection

• Phishing: Detects phishing and fraud emails using a database maintained by the Alibaba Group security team.

• Viruses: Scans tens of millions of files daily with the Alibaba Security Shendeng Cloud engine to intercept virus-laden emails.

2.5 Intelligent calibration

A reputation system tracks sender history and matches it against hundreds of legitimate email scenarios to reduce false positives while maintaining accurate interception.

2.6 Prevent phishing from compromised accounts

• Enable two-factor authentication and application-specific password authentication

The Alibaba Mail gateway blocks external spam and phishing emails. However, compromised accounts can bypass this protection, causing information leaks and financial losses.

Attackers crack passwords through dictionary attacks or weak password guessing, then use SMTP to send spam and phishing emails.

Alibaba Mail prevents this with multi-factor authentication, application-specific passwords, and IP sign-in restrictions. Even if credentials are stolen, attackers cannot send emails:

• Enable account security policies

• Enable periodic password change reminders

• Set IP sign-in restrictions

• Set an IP blocklist

3. Benefits

• Multilayer filtering blocks spam before it reaches your inbox.

• Precise interception for both inbound and outbound emails prevents email loss and ensures smooth delivery.

• Global multi-node deployment with smart routing ensures reliable cross-region delivery.

• Dynamic monitoring enables rapid issue detection and resolution.

• Years of accumulated data power a large-scale machine learning training library.

• Emails are decomposed into fingerprints and checked against a large database with rate limiting.

• Leverages results from globally recognized anti-spam consortiums.

• Backed by Alibaba Security's phishing database and virus scanning engine to intercept phishing, fraud, and virus emails.

• Dedicated customer-first after-sales support.

• Backed by multiple patented technologies.