公开(公告)号：US08291065B2

公开(公告)日：2012-10-16

申请号：US11537641

申请日：2006-09-30

申请人： Joshua T. Goodman ,  Paul S Rehfuss ,  Robert L. Rounthwaite ,  Manav Mishra ,  Geoffrey J Hulten ,  Kenneth G Richards ,  Aaron H Averbuch ,  Anthony P. Penta ,  Roderict C. Deyo

发明人： Joshua T. Goodman ,  Paul S Rehfuss ,  Robert L. Rounthwaite ,  Manav Mishra ,  Geoffrey J Hulten ,  Kenneth G Richards ,  Aaron H Averbuch ,  Anthony P. Penta ,  Roderict C. Deyo

IPC分类号： G06F15/173

CPC分类号： H04L63/1408 ,  H04L63/1441 ,  H04L63/1483

摘要： Phishing detection, prevention, and notification is described. In an embodiment, a messaging application facilitates communication via a messaging user interface, and receives a communication, such as an email message, from a domain. A phishing detection module detects a phishing attack in the communication by determining that the domain is similar to a known phishing domain, or by detecting suspicious network properties of the domain. In another embodiment, a Web browsing application receives content, such as data for a Web page, from a network-based resource, such as a Web site or domain. The Web browsing application initiates a display of the content, and a phishing detection module detects a phishing attack in the content by determining that a domain of the network-based resource is similar to a known phishing domain, or that an address of the network-based resource from which the content is received has suspicious network properties.

摘要翻译： 描述网络钓鱼检测，预防和通知。 在一个实施例中，消息收发应用促进通过消息收发用户界面的通信，并从域接收诸如电子邮件消息之类的通信。 钓鱼检测模块通过确定域与已知的网络钓鱼域相似，或通过检测域的可疑网络属性来检测通信中的网络钓鱼攻击。 在另一个实施例中，Web浏览应用程序从基于网络的资源（诸如网站或域）接收诸如网页的数据的内容。 Web浏览应用程序启动内容的显示，并且网络钓鱼检测模块通过确定基于网络的资源的域类似于已知的网络钓鱼域来检测内容中的网络钓鱼攻击，或者网络 - 收到内容的基于资源的资源具有可疑的网络属性。