Neutralizing malicious locators
AssigneeRapid7, Inc.
InventorsRoy Hodgman, Aditya Kuppa, Suchin Gururangan, Andrew Reece
Life of this patent
Estimating the term…
Abstract
Methods and systems for neutralizing malicious locators. Threat actors may shut down their web pages or applications (i.e., resources) that serve malicious content upon receiving request(s) configured to be perceived by the resource as non-browser requests. Therefore, initiating (large-scale) non-browser requests, or requests that are at least perceived as non-browser requests, may effectively act to inhibit, or even nullify, intended attack vectors.
Claims17
A method for neutralizing at least one malicious locator accessible through a network, the method comprising:
- identifying, through an interface to a computer-readable medium, a plurality of locators, each locator comprising the location of a potentially malicious network-accessible resource;
- requesting content from a locator of the plurality of locators via at least one program configured to be perceived by the resource as a non-browser program;
- and
- iterating the step of requesting content for locators remaining in the plurality after transmitting the request for content from the at least one configured program.
A system for neutralizing at least one malicious locator accessible through a network, the system comprising:
- an interface to a computer-readable medium;
- a network interface;
- and
- a processor in communication with the medium interface and the network interface, the processor configured to:
- identify a plurality of locators, each locator comprising the location of a potentially malicious network-accessible resource;
- request content from a locator of the plurality of locators via at least one program configured to be perceived by the resource as a non-browser program;
- and
- iterate the step of requesting content for locators remaining in the plurality after transmitting the request for content from the at least one configured program.
A computer readable medium containing computer-executable instructions for performing a method for neutralizing at least one malicious locator accessible through a network, the medium comprising:
- computer-executable instructions for identifying, through an interface to a computer-readable medium, a plurality of locators, each locator comprising the location of a potentially malicious network-accessible resource;
- computer-executable instructions for requesting content from a locator of the plurality of locators via at least one program configured to be perceived by the resource as a non-browser program;
- and
- computer-executable instructions for iterating the step of requesting content for locators remaining in the plurality after transmitting the request for content from the at least one configured program.
Dependencies are inferred from the claim text.