Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Holmes: An Efficient and Lightweight Semantic Based Anomalous Email
  Detector   Email threat is a serious issue for enterprise security, which consists of
various malicious scenarios, such as phishing, fraud, blackmail and
malvertisement. Traditional anti-spam gateway commonly requires to maintain a
greylist to filter out unexpected emails based on suspicious vocabularies
existed in the mail subject and content. However, the signature-based approach
cannot effectively discover novel and unknown suspicious emails that utilize
various hot topics at present, such as COVID-19 and US election. To address the
problem, in this paper, we present Holmes, an efficient and lightweight
semantic based engine for anomalous email detection. Holmes can convert each
event log of email to a sentence through word embedding then extract
interesting items among them by novelty detection. Based on our observations,
we claim that, in an enterprise environment, there is a stable relation between
senders and receivers, but suspicious emails are commonly from unusual sources,
which can be detected through the rareness selection. We evaluate the
performance of Holmes in a real-world enterprise environment, in which it sends
and receives around 5,000 emails each day. As a result, Holmes can achieve a
high detection rate (output around 200 suspicious emails per day) and maintain
a low false alarm rate for anomaly detection.

3
The categories of this paper are: physics
20
The categories of this paper are: acc-phys
18
The categories of this paper are: econ
37
The categories of this paper are: supr-con
24
The categories of this paper are: dg-ga
17
The categories of this paper are: q-fin
27
The categories of this paper are: comp-gas
30
The categories of this paper are: q-alg
21
The categories of this paper are: adap-org
36
The categories of this paper are: cmp-lg
0
The categories of this paper are: hep-ph
33
The categories of this paper are: plasm-ph
4
The categories of this paper are: cond-mat
28
The categories of this paper are: alg-geom
34
The categories of this paper are: chem-ph
13
The categories of this paper are: quant-ph