1. A method of identifying spam e-mail, the method to be performed by a computer having a processor and memory, the memory comprising computer-readable program code configured to be executed by the processor so the computer can perform the method, the method comprising: the computer identifying one or more of the tokens in an e-mail, wherein the tokens are selected for use in identifying spam e-mail, and wherein weights of the tokens, weights of heuristic rules that describe relationships between the tokens, and a threshold are computed using a support vector machine; the computer using identified tokens to determine if the e-mail satisfies one or more of the heuristic rules; the computer using weights of the identified tokens and a weight of a satisfied heuristic rule to generate a spam score; and the computer comparing the spam score to the threshold to determine if the e-mail is a spam e-mail or a legitimate e-mail.
1. A method of identifying spam e-mail, the method to be performed by a computer having a processor and memory, the memory comprising computer-readable program code configured to be executed by the processor so the computer can perform the method, the method comprising: the computer identifying one or more of the tokens in an e-mail, wherein the tokens are selected for use in identifying spam e-mail, and wherein weights of the tokens, weights of heuristic rules that describe relationships between the tokens, and a threshold are computed using a support vector machine; the computer using identified tokens to determine if the e-mail satisfies one or more of the heuristic rules; the computer using weights of the identified tokens and a weight of a satisfied heuristic rule to generate a spam score; and the computer comparing the spam score to the threshold to determine if the e-mail is a spam e-mail or a legitimate e-mail. 3. The method of claim 1 wherein the tokens comprise heuristic rules.