Some embodiments can include the feature of each entry within one of these external databases having reporter reputation scores developed in the same way as those within an organization. These scores can be combined together, weighted, and be compared to or used in combination with the scores of those individuals who have reported within an organization to determine if a message is malicious or not.
Some embodiments can include an anonymization proxy to enable sharing of rule/recipes anonymously with peer installations. For example, rules can be modified to remove identifying information such as the address of a message or an organization name. Some embodiments can be configured to share the name of the rule author and credit a user for sharing the rule. The performance of users who report and administrators who write successful rules can be tracked, and improvements on rules can be credited. In some embodiments, users may be associated with handles.
Processed Reports Module