Stopping and remediating outbound messaging abuse

SRG MSA Event Channel

<—iP

I SRG 305

Threat
Data / Outbound
Virus Data $0/ITP

ID PTQXY Sewer onfguration
360 Data Store
Behavior R6190“ 380
Maintainer Ge"e"aI°I
379 375
To SRG Control Console Fromggsoiontrol

-l

I F

I Determine email message disposition based on results of email filters I

I /— 540

I Update subscriber email sending profile(s) I

I /"”""°

Figure 5

( Detection Processing

/—e1o

Apply stationary models by comparing short-term subscriber email sending profile to long-term subscriber email sending profile