Optimal Personalized Filtering Against Spear-Phishing Attacks