Patent ID: 11861304
Assignee: MCAFEE, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 8:
9. A non-transitory computer readable storage medium comprising instructions to cause a programmable circuitry to at least:
generate a token graph based on a cluster of strings corresponding to a group of messages that are known to be spam, the token graph including non-pivot nodes;
identify first nodes of the token graph as pivot nodes corresponding to words that occur more than a threshold number of times in the group of messages, the threshold based on a number of strings in the cluster of strings;
tag corresponding ones of the nodes of the token graph as the pivot nodes; and
generate an anti-spam signature using: (a) substrings corresponding to the tagged nodes and (b) at least one substring corresponding to a non-pivot node of the non-pivot nodes, the anti-spam signature including a regular expression corresponding to non-pivot nodes at a location of the cluster of strings.