Malicious advertisement detection and remediation
AssigneeDasient, Inc.
InventorsAmeet Ranadive, Shariq Rizvi, Neilkumar Murli Daswani
Life of this patent
Estimating the term…
Abstract
Detecting a malicious advertisement is disclosed. An advertisement is analyzed. A determination that the advertisement is associated with malicious activity is made. An indication that the advertisement is malicious is provided as output. The indication can be provided as a report, such as to a publisher and can also be provided using an API, such as to the entity responsible for serving the advertisement.
Claims20
A system for detecting a malicious advertisement, comprising:
- a computer processor;
- and
- an anti-malvertising module executing on the computer processor and configured to:
- identify a web page comprising the advertisement;
- determine that the advertisement is hosted by a third party;
- periodically request emulation of the web page by a plurality of virtual machines, each of the plurality of virtual machines comprising an instrumented browser configured to perform a dynamic analysis of the web page by emulating presentation of the web page using different user profile information for different web pages;
- determine, based on an instance of emulating presentation of the web page, that the advertisement is associated with malicious content;
- and
- provide as output an indication that the advertisement is malicious.
A method for detecting a malicious advertisement, comprising:
- identifying a web page comprising the advertisement;
- determining that the advertisement is hosted by a third party;
- periodically requesting emulation of the web page by a plurality of virtual machines, each of the plurality of virtual machines comprising an instrumented browser configured to perform a dynamic analysis of the web page by emulating presentation of the web page using different user profile information for different web pages;
- determining, by a computer processor and based on an instance of emulating presentation of the web page, that the advertisement is associated with malicious content;
- and
- providing, by the computer processor, as output an indication that the advertisement is malicious.
A computer program product for detecting a malicious advertisement, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- identifying a web page comprising the advertisement;
- determining that the advertisement is hosted by a third party;
- periodically requesting emulation of the web page by a plurality of virtual machines, each of the plurality of virtual machines comprising an instrumented browser configured to perform a dynamic analysis of the web page by emulating presentation of the web page using different user profile information for different web pages;
- determining, based on an instance of emulating presentation of the web page, that the advertisement is associated with malicious content;
- and
- providing as output an indication that the advertisement is malicious.
Dependencies are inferred from the claim text.