spam filter

term

securityops culture

The system deciding which incoming mail reaches a person - the most consequential automated judgement most organisations run.

It is a false-positive problem more than a detection problem: missing spam is an annoyance and blocking an invoice, a job offer or a customer reply is a business incident, which is why quarantine and release exist at all. It is also the first control an attacker tests, because delivery is the precondition for phishing, and the reason authentication records for a domain matter to everyone who receives its mail rather than only to its owner.

Also known as: antispam

All glossary entries