Domain reputation system

An apparatus to facilitate domain reputation analysis and prevention of malicious attacks on a web service, the apparatus comprising:

• one or more computer-readable storage media;
• a processing system operatively coupled with the one or more computer-readable storage media;
• and
• program instructions stored on the one or more computer-readable storage media that, when executed by the processing system, direct the processing system to at least:
• crawl web resources associated with the web service to obtain information about internal and external web assets associated with the web service;
• utilize headless browser automation with a security scanner browser extension to intercept responses from the internal and external web assets based on the obtained information;
• dynamically inject content security policy headers into the responses to determine dependency data associated with the internal and external web assets;
• process the dependency data associated with the internal and external web assets to identify domains with which the internal and external web assets communicate;
• analyze the domains to determine name server reputation, internet protocol (IP) address reputation, and hosting provider reputation associated with the domains;
• generate individual domain reputation scores for each of the domains based on the name server reputation, IP address reputation, and hosting provider reputation associated with the domains;
• and
• dynamically generate and deploy content security policies for the web service based on the individual domain reputation scores for each of the domains to protect the web service.

One or more computer-readable storage media having program instructions stored thereon to facilitate domain reputation analysis and prevention of malicious attacks on a web service, wherein the program instructions, when executed by a computing system, direct the computing system to at least:

• crawl web resources associated with the web service to obtain information about internal and external web assets associated with the web service;
• utilize headless browser automation with a security scanner browser extension to intercept responses from the internal and external web assets based on the obtained information;
• dynamically inject content security policy headers into the responses to determine dependency data associated with the internal and external web assets;
• process the dependency data associated with the internal and external web assets to identify domains with which the internal and external web assets communicate;
• analyze the domains to determine name server reputation, internet protocol (IP) address reputation, and hosting provider reputation associated with the domains;
• generate individual domain reputation scores for each of the domains based on the name server reputation, IP address reputation, and hosting provider reputation associated with the domains;
• and
• dynamically generate and deploy content security policies for the web service based on the individual domain reputation scores for each of the domains to protect the web service.