Holmes: An Efficient and Lightweight Semantic Based Anomalous Email Detector. (arXiv:2104.08044v13 [cs.CR] UPDATED)

Email threat is a serious issue for enterprise security. The threat can be in
various malicious forms, such as phishing, fraud, blackmail and malvertisement.
The traditional anti-spam gateway often maintains a greylist to filter out
unexpected emails based on suspicious vocabularies present in the email's
subject and contents. However, this type of signature-based approach cannot
effectively discover novel and unknown suspicious emails that utilize various
evolving malicious payloads. To address the problem, in this paper, we present
Holmes, an efficient …

detector email holmes