Loading patent…
AssigneeThreatMETRIX PTY LTD
InventorsSCOTT THOMAS, DAVID G. JONES, ALISDAIR FAULKNER
Estimating the term…
A method for tracking machines on a network of computers includes determining one or more assertions to be monitored by a first web site which is coupled to a network of computers. The method monitors traffic flowing to the web site through the network of computers and identifies the one or more assertions from the traffic coupled to the network of computers to determine a malicious host coupled to the network of computers. The method includes associating a first IP address and first hardware finger print to the assertions of the malicious host and storing information associated with the malicious host in one or more memories of a database. The method also includes identifying an unknown host from a second web site, determining a second IP address and second hardware finger print with the unknown host, and determining if the unknown host is the malicious host.
A method for remote tracking of machines on a network of computers, the method comprising:
The method of claim 1 wherein the hardware fingerprint comprises device fingerprint.
A method for fingerprinting a connecting host machine on a network, the method comprising:
The method of claim 9 wherein the sampled attributes are associated with one or more of ‘stack ticks’, ‘time-skew’, TCP Window size, and IP address.
The method of claim 12 wherein the extending of the longevity of the connection includes:
A computer based system for populating a database to form a knowledge base of malicious host entities, the system comprising a machine readable memory or memories, the memory or memories comprising:
The system of claim 15 wherein the unknown host is one of a plurality of computing devices in a world wide network of computers.
The system of claim 19 wherein the identifier is an IP address.
Dependencies are inferred from the claim text.