Abstract: Website trustworthiness is automatically displayed to a user by pre-establishing a user-defined good list identifying one or more known good website addresses. Each known good website address in the user-defined good list has associated therewith at least one user-defined visual characteristics for display. Subsequently, responsive to the user selecting to visit a website address identified in the user-defined good list, the website is displayed for the user and the user-defined visual characteristics associated therewith from the user-defined good list are also concurrently displayed with the website. The user-defined visual characteristics provide the user with a visual indication of website trustworthiness concurrently with display of the website.

Abstract: A method and system for reducing false positives in the classification of data is provided, wherein the data can be categorized into fields, including creating an assertion table or assessing an existing assertion table for the data whereby the data is placed into categories and each category is assigned one or more classifications, setting a positive and/or negative assertion ratio for each category, determining the accuracy of each classification by assessing a percentage of the data in each category to see if the data is correctly identified by the classification, if the positive assertion ratio is reached, maintaining the classification for each category of data, if the negative assertion ratio is reached, de-asserting the classification.

Abstract: A method and system for reducing false positives in the classification of data is provided, wherein the data can be categorized into fields, including creating an assertion table or assessing an existing assertion table for the data whereby the data is placed into categories and each category is assigned one or more classifications, setting a positive and/or negative assertion ratio for each category, determining the accuracy of each classification by assessing a percentage of the data in each category to see if the data is correctly identified by the classification, if the positive assertion ratio is reached, maintaining the classification for each category of data, if the negative assertion ratio is reached, de-asserting the classification.

Abstract: Website trustworthiness is automatically displayed to a user by pre-establishing a user-defined good list identifying one or more known good website addresses. Each known good website address in the user-defined good list has associated therewith at least one user-defined visual characteristics for display. Subsequently, responsive to the user selecting to visit a website address identified in the user-defined good list, the website is displayed for the user and the user-defined visual characteristics associated therewith from the user-defined good list are also concurrently displayed with the website. The user-defined visual characteristics provide the user with a visual indication of website trustworthiness concurrently with display of the website.

Abstract: A system, method and program product for managing e-mails from a source suspected of sending spam. The e-mails are received at a firewall or router en route to a mail server. A determination is made whether a source has sent an e-mail which exhibits characteristics of spam. In response, subsequent e-mails from the source destined for the mail server are rate-limiting at the firewall or router such that the firewall or router limits a rate at which the subsequent e-mails are forwarded from the firewall or router to the mail server. The rate is predetermined and less than a maximum rate at which the firewall or router can physically forward e-mails to the mail server absent the rate limit. A determination is made whether another source has sent another e-mail which exhibits more characteristics of spam than the first said e-mail. In response, subsequent e-mails from this other source are blocked at the firewall or router.

Abstract: A method of blocking spam at a firewall involves applying blocking measures for an adaptively determined duration. The blocking measure is then suspended while determining whether the spam has ended. If so, the method resets to an initial state. Otherwise, the blocking measure is re-applied for a second duration.

Abstract: A system, method and program product for blocking unwanted e-mails. An e-mail is identified as unwanted. A source IP address of the unwanted e-mail is determined. Other source IP addresses owned or registered by an owner or registrant of the source IP address of the unwanted e-mail are determined. Subsequent e-mails from the source IP address and the other IP addresses are blocked. This will thwart a spammer who shifts to a new source IP address when its spam is blocked from one source IP address.