As all the traffic between the public Internet and the customer's desktop must be interconnected through ISP's access network, this work thus makes use of the transportation traffic log gathered from backbone router to develop SMTP flooding detection syst