The BEC criteria are configured to detect and take actions on BEC email messages.
Add high profile users as the global BEC settings so that Trend Micro Email Security will check incoming email messages claimed to be sent from those users and apply fraud checking criteria to identify forged messages.
For details about high profile users, see Configuring High Profile Users.
Detected as BEC attacks by Antispam Engine: apply this rule to email messages that are verified to be BEC attacks by the Antispam Engine.
Detected as BEC attacks by writing style analysis: apply this rule to email messages that are verified to be BEC attacks by writing style analysis.
Trend Micro's Writing Style DNA technology scans email messages of a desired individual to learn the particular writing style and generate a writing style model. The writing style model is a set of properties or features explored with automated methods that uniquely identify the way an individual composes email messages. By leveraging the writing style model trained in Cloud App Security for high profile users, Trend Micro Email Security compares the incoming email messages claimed to be sent from the individual with the model to identify BEC attacks.
To ensure that the writing style model of a high profile user is available for analysis, Trend Micro Email Security runs a scheduled task every five minutes to synchronize the status of writing style models trained in Cloud App Security.
In this release, writing style analysis applies to email messages written in English, Japanese, German, French, Spanish, Swedish, Danish, Norwegian, and Finnish.
To enable writing style analysis, the license for Cloud App Security is required.
The first two options are not included in the Trend Micro Email Security Standard license.
For details about different license versions, see Available License Versions.