Multiple features of email traffic are analyzed and extracted. Feature vectors comprising the multiple features are created and cluster analysis is utilized to track spam generation even from dynamically changing or aliased IP addresses....http://www.google.co.uk/patents/US7809824?utm_source=gb-gplus-sharePatent US7809824 - Classification and cluster analysis spam detection and reduction
