Phishing Detection, Prevention, and Notification
    2.
    发明申请
    Phishing Detection, Prevention, and Notification 有权
    网络钓鱼检测,预防和通知

    公开(公告)号:US20070039038A1

    公开(公告)日:2007-02-15

    申请号:US11537641

    申请日:2006-09-30

    IPC分类号: H04L9/32 G06K9/00

    摘要: Phishing detection, prevention, and notification is described. In an embodiment, a messaging application facilitates communication via a messaging user interface, and receives a communication, such as an email message, from a domain. A phishing detection module detects a phishing attack in the communication by determining that the domain is similar to a known phishing domain, or by detecting suspicious network properties of the domain. In another embodiment, a Web browsing application receives content, such as data for a Web page, from a network-based resource, such as a Web site or domain. The Web browsing application initiates a display of the content, and a phishing detection module detects a phishing attack in the content by determining that a domain of the network-based resource is similar to a known phishing domain, or that an address of the network-based resource from which the content is received has suspicious network properties.

    摘要翻译: 描述网络钓鱼检测,预防和通知。 在一个实施例中,消息收发应用促进通过消息收发用户界面的通信,并从域接收诸如电子邮件消息之类的通信。 钓鱼检测模块通过确定域与已知的网络钓鱼域相似,或通过检测域的可疑网络属性来检测通信中的网络钓鱼攻击。 在另一个实施例中,Web浏览应用程序从基于网络的资源(诸如网站或域)接收诸如网页的数据的内容。 Web浏览应用程序启动内容的显示,并且网络钓鱼检测模块通过确定基于网络的资源的域类似于已知的网络钓鱼域来检测内容中的网络钓鱼攻击,或者网络 - 收到内容的基于资源的资源具有可疑的网络属性。

    Finding phishing sites
    3.
    发明申请
    Finding phishing sites 有权
    寻找钓鱼网站

    公开(公告)号:US20070192855A1

    公开(公告)日:2007-08-16

    申请号:US11335902

    申请日:2006-01-18

    IPC分类号: G06F12/14

    摘要: Described is a technology by which phishing-related data sources are processed into aggregated data and a given site evaluated the aggregated data using a predictive model to automatically determine whether the given site is likely to be a phishing site. The predictive model may be built using machine learning based on training data, e.g., including known phishing sites and/or known non-phishing sites. To determine whether an object corresponding to a site is likely a phishing-related object are described, various criteria are evaluated, including one or more features of the object when evaluated. The determination is output in some way, e.g., made available to a reputation service, used to block access to a site or warn a user before allowing access, and/or used to assist a hand grader in being more efficient in evaluating sites.

    摘要翻译: 描述了一种将钓鱼相关数据源处理为聚合数据的技术,给定的站点使用预测模型评估聚合数据,以自动确定给定站点是否可能是钓鱼站点。 可以使用基于训练数据的机器学习来构建预测模型,例如包括已知的网络钓鱼站点和/或已知的非网络钓鱼站点。 为了确定对应于站点的对象是否可能是与钓鱼相关的对象,评估了各种标准,包括评估时对象的一个​​或多个特征。 该确定以某种方式输出,例如可用于信誉服务,用于阻止对站点的访问或在允许访问之前警告用户,和/或用于帮助平手机更有效地评估站点。

    INTERNET PROTOCOL ADDRESS SPACE MANAGEMENT TO MITIGATE AND DETECT CLOAKING AND OTHER ABUSE
    7.
    发明申请
    INTERNET PROTOCOL ADDRESS SPACE MANAGEMENT TO MITIGATE AND DETECT CLOAKING AND OTHER ABUSE 有权
    互联网协议地址空间管理,以缓解和检测克隆和其他滥用

    公开(公告)号:US20130091566A1

    公开(公告)日:2013-04-11

    申请号:US13269632

    申请日:2011-10-10

    IPC分类号: G06F21/20

    CPC分类号: G06F21/645

    摘要: In one embodiment, an intelligent detection system 102 may determine if a network target 108 is an adversarial site based on comparing responses to different network sources. The intelligent detection system 102 may select a test apparent network source 110 and a control apparent network source 112 from a network source pool 106. The intelligent detection system 102 may receive the test response responding to a test request from the test apparent network source 110 to a network target 108. The intelligent detection system 102 may receive the control response responding to a control request from the control apparent network source 112 to the network target 108. The intelligent detection system 102 may execute a comparison of the test response to the control response.

    摘要翻译: 在一个实施例中,智能检测系统102可以基于对不同网络源的响应进行比较来确定网络目标108是否是对抗性站点。 智能检测系统102可以从网络源池106中选择测试视网络源110和控制视网络源112.智能检测系统102可以将来自测试视网络源110的测试请求响应的测试响应接收到 智能检测系统102可以响应于来自控制视网络源112到网络目标108的控制请求而接收控制响应。智能检测系统102可以执行测试响应与控制响应的比较 。

    Internet protocol address space management to mitigate and detect cloaking and other abuse
    8.
    发明授权
    Internet protocol address space management to mitigate and detect cloaking and other abuse 有权
    互联网协议地址空间管理,以减轻和检测伪装和其他滥用

    公开(公告)号:US08745736B2

    公开(公告)日:2014-06-03

    申请号:US13269632

    申请日:2011-10-10

    IPC分类号: G06F11/00

    CPC分类号: G06F21/645

    摘要: In one embodiment, an intelligent detection system 102 may determine if a network target 108 is an adversarial site based on comparing responses to different network sources. The intelligent detection system 102 may select a test apparent network source 110 and a control apparent network source 112 from a network source pool 106. The intelligent detection system 102 may receive the test response responding to a test request from the test apparent network source 110 to a network target 108. The intelligent detection system 102 may receive the control response responding to a control request from the control apparent network source 112 to the network target 108. The intelligent detection system 102 may execute a comparison of the test response to the control response.

    摘要翻译: 在一个实施例中,智能检测系统102可以基于对不同网络源的响应进行比较来确定网络目标108是否是对抗性站点。 智能检测系统102可以从网络源池106中选择测试视网络源110和控制视网络源112.智能检测系统102可以将来自测试视网络源110的测试请求响应的测试响应接收到 智能检测系统102可以响应于来自控制视网络源112到网络目标108的控制请求而接收控制响应。智能检测系统102可以执行测试响应与控制响应的比较 。