Phishing detection methods and systems
AssigneeEC-Council International Limited
InventorsManinder Pal Singh, Aditya Bhardwaj
Life of this patent
Estimating the term…
Abstract
Methods and systems for detecting a phishing attack on a computer device can involve scanning one or more email messages, and separating email parts from the one or more email messages, in response to scanning the at least one email message. In addition, the email parts of the at least one email message can be subject to a feature extraction operation. The email features extracted from the email parts can be then analyzed to determine whether or not any of the email features contain suspected phishing content, confirmed phishing content and benign email content.
Claims20
A method for detecting a phishing attack on a computer device, comprising:
- scanning at least one email message;
- separating email parts from the at least one email message, in response to scanning the at least one email message;
- subjecting the email parts of the at least one email message to a feature extraction operation;
- and
- analyzing email features extracted from the email parts to determine whether or not any of the email features contain suspected phishing content, confirmed phishing content and benign email content.
A system for detecting a phishing attack on a computer device, comprising:
- at least one processor;
- and
- a non-transitory computer-usable medium embodying computer program code, the computer-usable medium capable of communicating with the at least one processor, the computer program code comprising instructions executable by the at least one processor and configured for:
- scanning at least one email message;
- separating email parts from the at least one email message, in response to scanning the at least one email message;
- subjecting the email parts of the at least one email message to a feature extraction operation;
- and
- analyzing email features extracted from the email parts to determine whether or not any of the email features contain suspected phishing content, confirmed phishing content and benign email content.
A system for detecting a phishing attack on a computer device, comprising:
- a tokenizer for separating email parts from at least one email message, in response to scanning the at least one email message;
- and
- a feature extractor for subjecting the email parts of the at least one email message to a feature extraction operation, wherein email features extracted from the email parts are analyzed to determine whether or not any of the email features contain suspected phishing content, confirmed phishing content and benign email content.
Dependencies are inferred from the claim text.