Abstract: Communication device (T1) comprising—An antenna (A1) and physical circuitry (PHY) for receiving a poll command (PC) from a second communication device (T2).—A plurality of entities (D1, D2, D3 . . . Dn) emulating NFC devices,—An arrangement for deciding, for each entity of said plurality of entities, if a response should be sent and if so sending a response (LF1, LF2, LF3 . . . LFn) to said second communication device (T2), containing information related to the respective NFC device.

Abstract: Communication device (T1) comprising—An antenna (A1) and physical circuitry (PHY) for receiving a poll command (PC) from a second communication device (T2).—A plurality of entities (D1, D2, D3 . . . Dn) emulating NFC devices,—An arrangement for deciding, for each entity of said plurality of entities, if a response should be sent and if so sending a response (LF1, LF2, LF3 . . . LFn) to said second communication device (T2), containing information related to the respective NFC device.

Abstract: An improved system and method for detecting spam e-mail over a distributed network is disclosed. The distributed network includes multiple servers that receive and process e-mail messages for a multiple remotely located clients. The system includes multiple packet sniffers that are each located on a unique one of servers. The packet sniffers extract originating IP addresses associated with e-mail messages that are communicated to the clients over the network. The system further includes a central monitor that communicates with the packet sniffers and that monitors data regarding originating IP addresses. The monitor determines whether an originating IP address has exceeded a threshold value and may take corrective measures in response, such as generating an alert to a spam analyst or blocking messages originating from that IP address. By leveraging data from several different clients, the system can detect and stop spam messages for an IP address even if a spammer has not targeted a specific customer.

Abstract: The present invention extends to methods, systems, and computer program products for updating Bloom filters. Embodiments of the invention facilitate more efficient use Bloom filters across multiple computers connected across a WAN (potentially having limited bandwidth and latency characteristics), such as, for example, computers located on different continents. The acceptability of false positives is leveraged by allowing the operation of removing items from a set to be batched and delayed. On the other hand, insert operations may be more latency sensitive as a delayed insert results in the semantic equivalent to a false negative. As such, additions to a set are processed in closer to real time to update Bloom filters. In some embodiments, Bloom filters are used to check set membership for electronic mail addresses.

Abstract: The present invention provides an improved system and method for processing e-mail. The system may be implemented over a distributed network having several redundant mail servers. The system may include a message switch that receives all incoming e-mail messages and includes a policy filter, a content filter, a virus filter and a spam filter. The filters process the message in a sequential order and can be dynamically reconfigured to adapt to certain conditions. The message is stored in an area of the message switch and the filters communicate with each other by passing links to the message in order to reduce input/output. This communication method may be altered to suit the installation of the software, without altering each filter. Messages that do not pass the filters may be rejected or placed in a quarantine area. Messages that pass all of the filters are delivered to their intended recipients.

Abstract: A method and system for detecting and preventing bulk messages in real-time is provided. A detection server detects and prevents bulk messages in real-time by analyzing the network traffic pattern of attributes of messages, such as email messages, that are passing through the network against an expected network traffic pattern. The expected network traffic pattern may be specified as a combination of a rate and one or more thresholds, where each threshold has a corresponding status. The rate specifies a quantity of an attribute measured with respect to a quantity of time. A status associated with a threshold is attained when the rate is exceeded the requisite threshold number of times. The status indicates an action that is to be taken in processing the email message containing the attribute. An email message can then be processed in accordance with a status assigned to an attribute of the email message.

Abstract: The present invention provides an improved system and method for analyzing spam e-mail. The system and method monitors instances of spam across a distributed network, and creates and stores records of these instances as encoded information strings, which are attached to each message as a header. The system and method use information and statistics obtained from the information strings to dynamically create, modify and retire rules for analyzing and managing spam e-mail. The system also allows analysts to dynamically create, modify and retire rules based upon feedback regarding unidentified spam messages and false positives.

Abstract: A method for controlling a message distribution process comprising a series of coordinated processes by monitoring the performance of each process, determining that a monitored process is not processing properly, and skipping the process not processing properly. Another method for controlling the load of message traffic by determining the performance of a message server and altering the flow of messages based upon the determined performance of the message server. Another method for routing messages by identifying the addresses of senders of received messages, assigning a portion of the addresses to a category, and routing messages from the identified addresses according to their assigned category.

Abstract: A set of filter rules are applied to pieces of text. The runtime for each rule of the set of filter rules is determined. The runtime performance of the set of filter rules based on the runtime for each rule is outputted.

Abstract: A method and system for detecting and preventing bulk messages in real-time is provided. A detection server detects and prevents bulk messages in real-time by analyzing the network traffic pattern of attributes of messages, such as email messages, that are passing through the network against an expected network traffic pattern. The expected network traffic pattern may be specified as a combination of a rate and one or more thresholds, where each threshold has a corresponding status. The rate specifies a quantity of an attribute measured with respect to a quantity of time. A status associated with a threshold is attained when the rate is exceeded the requisite threshold number of times. The status indicates an action that is to be taken in processing the email message containing the attribute. An email message can then be processed in accordance with a status assigned to an attribute of the email message.