Systems and methods for detecting a potentially malicious uniform resource locator
AssigneeSymantec Corporation
InventorJoseph Huaning Chen
Life of this patent
Estimating the term…
Abstract
A computer-implemented method to detect a potentially malicious uniform resource locator (URL) is described. A presentation of a URL on a display of a computing device is detected. An actual URL associated with the URL presented on the display is obtained. The URL presented on the display is compared to the actual URL associated with the presented URL. If the URL presented on the display does not match the actual URL, the actual URL is prevented from being accessed.
Claims16
A computer-implemented method to detect a potentially malicious uniform resource locator (URL), comprising:
- detecting a presentation of a URL on a display of a computing device;
- obtaining an actual URL associated with the URL presented on the display;
- isolating an extension type of the actual URL, wherein an extension type includes a type of file;
- determining whether the extension type of the actual URL matches a predetermined type of file;
- upon determining the extension type of the actual URL matches a predetermined type of file, comparing the isolated extension type of the actual URL with at least a portion of the URL presented on the display;
- and
- if the at least a portion of the URL presented on the display does not match the isolated extension type of the actual URL, preventing the actual URL from being accessed.
A computing device configured to detect a potentially malicious uniform resource locator (URL), comprising:
- a processor;
- memory in electronic communication with the processor;
- a display;
- instructions stored in the memory, the instructions being executable by the processor to:
- detect a presentation of a URL on the display of the computing device;
- obtain an actual URL associated with the URL presented on the display;
- isolate an extension type of the actual URL, wherein an extension type includes a type of file;
- determine whether the extension type of the actual URL matches a predetermined type of file;
- upon determining the extension type of the actual URL matches a predetermined type of file, compare the isolated extension type of the actual URL with at least a portion of the URL presented on the display;
- and
- if the at least a portion of the URL presented on the display does not match the isolated extension type of the actual URL, prevent the actual URL from being accessed.
A computer-program product for detecting a potentially malicious uniform resource locator (URL), the computer-program product comprising a non-transitory computer-readable medium storing instructions thereon, the instructions being executable by the processor to:
- detect a presentation of a URL on a display of a computing device;
- obtain an actual URL associated with the URL presented on the display;
- isolate an extension type of the actual URL, wherein an extension type includes a type of file;
- determine whether the extension type of the actual URL matches a predetermined type of file;
- upon determining the extension type of the actual URL matches a predetermined type of file, compare the isolated extension type of the actual URL with at least a portion of the URL presented on the display;
- and
- if the at least a portion of the URL presented on the display does not match the isolated extension type of the actual URL, prevent the actual URL from being accessed.
Dependencies are inferred from the claim text.