System and method for omnichannel social engineering attack avoidance
AssigneeTelepathy Labs, Inc.
InventorsDamien Phelan Stolarz, Johanna Dwyer, Ronald J. Pollack
Life of this patent
Estimating the term…
Abstract
A method, computer program product, and computer system for identifying social engineering activity associated with at least one of a first communication and a second communication based upon, at least in part, correlation to a predetermined rule. Characteristics of the communications are compared to the predetermined rule to determine if there is a correlation.
Claims20
A computer-implemented method comprising:
- identifying, by a computing device, a first characteristic of a first communication received on a first communication channel;
- identifying a second characteristic of a second communication received on a second communication channel, wherein both the first communication channel and the second communication channel are different communication platforms;
- comparing, with a predetermined rule, both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel, wherein the first characteristic and the second characteristic are different characteristics;
- determining that both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel correlates to the predetermined rule by performing an assessment of both similarities and differences of text for the first communication and the second communication compared to text of at least one of malicious and non-malicious communications;
- and
- identifying potential social engineering activity associated with at least one of the first communication and the second communication based upon, at least in part, correlating both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel to the predetermined rule.
A computer program product residing on a non-transitory computer readable storage medium having a plurality of instructions stored thereon which, when executed across one or more processors, causes at least a portion of the one or more processors to perform operations comprising:
- identifying, by a computing device, a first characteristic of a first communication received on a first communication channel;
- identifying a second characteristic of a second communication received on a second communication channel, wherein both the first communication channel and the second communication channel are different communication platforms;
- comparing, with a predetermined rule, both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel, wherein the first characteristic and the second characteristic are different characteristics;
- determining that both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel correlates to the predetermined rule by performing an assessment of both similarities and differences of text for the first communication and the second communication compared to text of at least one of malicious and non-malicious communications;
- and
- identifying potential social engineering activity associated with at least one of the first communication and the second communication based upon, at least in part, correlating both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel to the predetermined rule.
A computing system including one or more processors and one or more memories configured to perform operations comprising:
- identifying, by a computing device, a first characteristic of a first communication received on a first communication channel;
- identifying a second characteristic of a second communication received on a second communication channel, wherein both the first communication channel and the second communication channel are different communication platforms;
- comparing, with a predetermined rule, both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel, wherein the first characteristic and the second characteristic are different characteristics;
- determining that both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel correlates to the predetermined rule by performing an assessment of both similarities and differences of text for the first communication and the second communication compared to text of at least one of malicious and non-malicious communications;
- and
- identifying potential social engineering activity associated with at least one of the first communication and the second communication based upon, at least in part, correlating both the first characteristic of the first communication received on the first communication channel and the second characteristic of the second communication received on the second communication channel to the predetermined rule.
Dependencies are inferred from the claim text.