|
Competing Technologies
Heuristic or rule-based systems, rely on human
experts to deduce recurring patterns in spam messages, limiting them to 85-94% accuracy. When performing
this duty, humans tend to isolate the wrong or
incomplete patterns that identify spam. This is due to the fact that
humans are pre-disposed to focusing on the emotional weight of words
instead of their contextual meaning. Consider the word
tokens "penis" and "#FF0000" (the formatting sequence for the color red).
Humans will create patterns that isolate "penis" and ignore "#FF0000", when the reality is that "#FF0000" occurs in spam
nearly 5x more often than "penis", and "penis" has more representation in
legitimate mail. Since a human expert is involved examining spam
and non-spam messages for patterns, only a relatively small
number of patterns are ever identified, and rarely with even basic
context.
The root problem with heuristics is human bias.
Bayesian systems are subject to accuracy plateaus
and literary attacks that limit them to a 95-98% accuracy range.
Due to limitations in their designs, Bayesian systems are restricted to establishing a shallow level of context.
While they are not subject to the same bias influence as heuristic systems, they too are subject
to the changing tactics of spammers. This is particularly the case with literary attacks,
which they have proven particularly susceptible to. Compounding this problem, is the weeks and
months of training they require to reach the 95% accuracy level of high-end heuristic systems.
Their primary advantage over heuristic systems is their higher accuracy once trained, and the
capability of some to have different "training" for individual users. Once fully trained, their
shallow context limitations cause their accuracy to plateau at 98%. Bayesian systems simply
are not sophisticated enough to keep pace with the waves of mutating spam.
Fingerprinting technologies are progeny of Bayesian systems and
offer a similar accuracy range of 95-97%. They use a database of spam signatures to determine the
spam score of messages. These signatures are in fact typically generated using Bayesian engines.
The primary difference between Bayesian engines and fingerprinting systems is that the fingerprinting
vendor does the work of generating signatures for you. Fingerprinting also inherits Bayesian's accuracy
limitations and adds a few of its own: primarily an inability to tailor results to individual users,
coupled with a lag time between signature development and deployment by customers. This lag time can
mean reams of new spam types in your mailboxes. Fingerprinting technologies trade accuracy for ease
of use. A devil's bargain in today's turbulent spam environment.
A Word on Phishing
Phishing
integrates the worlds of malware and spam to create a malicious message
that is more than the sum of its parts. The iSTAT™ messaging engine
has been enhanced to leverage its existing strengths and eStrand™ technology
coupled with phishing-specific methodologies. True phishing protection
requires more than just a spam engine, it requires a spam engine that speaks the phishing dialect.
Our unique position as a purveyor not only of messaging security but also complete managed security, gives
DigiTar an advantage in attacking all aspects of phishing. A multi-vectored threat requires a
multi-vectored approach.
Sentinel Messaging ™ Features & Benefits
| |
Features |
|
Benefits |
| |
- Proprietary iSTAT™ anti-spam engine provides next-generation
DNA-based spam and phishing protection
|
|
- Factors-of-magnitude productivity increases are enabled
by 99.9% accuracy in detecting spam and phishing
attacks
|
| |
- Dynamic Spam Trend Alignment™ (DSTA™)
|
|
- Client-influenced DSTA™ enables our entire client
base to benefit from our eagle-eye point-of-view over the
spam landscape, thus as new spam begins to ripple in
against our spam outposts our entire client base becomes
protected
against the ensuing onslaught
- DSTA™ is a part of the iSTAT™ engine that
is continually equalizing and detecting new spam trends,
thereby providing our client base faster and more effective
spam protection
|
| |
|
|
- Key to the SMS experience is the transparency and intuitiveness
to the end user and administrator
- To the end user e-mail is sent and received as before
- Simplicity and intuitiveness to
the novice user are thematic throughout the SMS portal
and other features
- Auto-provisioning and other features reduce administrator
interaction to a minimum, making the selection of SMS
a fire and forget decision
|
| |
|
|
- Each user's spam tastes are treated individually by
iSTAT™ enabling different users with vastly different
spam/not-spam preferences to enjoy the same 98% and greater
accuracy
|
| |
- User-serviceable personal quarantines
|
|
- Through the DigiTar Sentinel web portal each SMS user
has 24/7 access to their personal collection of spam and
phishing messages, from which they can release valid messages
that are accidentally caught
|
| |
|
|
- By sitting ahead of your mail servers, SMS greatly reduces
the amount of e-mail your servers must process, thereby greatly
freeing up your Internet usage and the processing overhead
on your servers (not too mention reducing mail retrieval
times for remote users)
- Additionally, all dangerous content is handled away from
your core network, affording greater default protection to
your enterprise and effectively hiding your corporate mail
servers from Denial of Service (DoS) and other crippling
cyber assaults
|
| |
|
|
- Each user has a unique self-serviceable whitelist that
indicates senders for whom spam processing is bypassed (NOTE:
virus and worm processing is still performed)
|
|