The folks on the Forefront Online Protection for Exchange (FOPE) team doing a lot to stop the spam and their efforts has translated into measurable impacts to help safeguard customers' inbound, outbound and internal business mail from spam, viruses, phishing attacks, out-of-policy content and help customers focus on being productive.
"FOPE processes over a billion messages worldwide every day, including for Exchange Online customers. This team works hard to offer five financially backed SLA's including 100% known virus, 98% antispam protection and 99.999% uptime," posted Exchange team.
"FOPE offers an effective combination of anti-malware and antispam technologies to protect organizations from both known and unknown malicious software including heuristics scanning and block lists to maintain and achieve the 98% SLA. Some of our IP block lists are built to act proactively; they examine traffic history making judgments about whether communication is coming from a good sender or bad sender. Additionally, as patterns emerge to show which senders are responsible for a high volume of illegitimate messages, FOPE will automatically add the sending IP address(es) into the reputation block list so that all future messages from that particular IP are no longer accepted by the service's global network," the team blogged.
In the video, Terry Zink discusses taking a statistical approach to the way the FOPE team approach designing IP block lists and further elaborate on this approach: