Techniques for detecting malicious behavior using an accomplice model
AssigneeRiskIQ, Inc.
InventorsAdam Hunt, Joseph Linn, Nick Goodman, Elias Manousos, Chris Kiernan, David Pon, Jonas Edgeworth
Life of this patent
Estimating the term…
Loading patent…
AssigneeRiskIQ, Inc.
InventorsAdam Hunt, Joseph Linn, Nick Goodman, Elias Manousos, Chris Kiernan, David Pon, Jonas Edgeworth
Estimating the term…
The present disclosure generally relates to web page analysis, and more particularly to detecting malicious behavior using an accomplice model. In certain embodiments, the accomplice model may determine that a URI is associated with malicious behavior based upon the URI being associated with an attribute determined to be related to malicious behavior. Examples of an attribute include a host system, a domain, or an element of a document used to render the web page. Examples of an element of a document used to render the web page may include an active/dynamic element (e.g., a function, a script, etc.) or an inactive/static element (e.g., a string, a number, a frame, a tracking username, a social networking username, etc.).
A method comprising, at a computer system:
A non-transitory computer-readable storage medium storing a plurality of instructions executable by one or more processors of a computer system, the plurality of instructions when executed by the one or more processors cause the one or more processors to:
A system comprising:
Dependencies are inferred from the claim text.