Fake web addresses and hyperlinks
AssigneeInternational Business Machines Corporation
InventorJohn Michael Lake
Life of this patent
Estimating the term…
Abstract
A destination address is processed to determine if the destination address is a fake web address or hyperlink. The destination address may be compared with a database of known domain names to see if the domain name is legitimate or illegitimate. The designation address may also be compared to other domain names to see if it is an honest or dishonest transformation of the other domain names. Appropriate action may be taken if the designation address is a dishonest transformation of another domain name.
Claims57
A computer-implemented method of processing a destination address, the method comprising:
- receiving, within a computer hardware device, the destination address;
- determining that the destination address is a domain name;
- comparing the domain name with a database of legitimate domain names;
- determining that the domain name does not match an entry in the database of legitimate domain names;
- analyzing the domain name to determine that the domain name is a dishonest transformation of a legitimate domain name by determining a similarity value between the domain name and the legitimate domain name exceeds a predetermined value, the similarity value being based upon a longest common subsequence between the domain name and the legitimate domain name;
- classifying the destination address as a fraudulent address;
- and
- taking an appropriate action in response to classifying the destination address as a fraudulent address.
A computer-readable memory having stored thereon computer-readable program instructions for processing a destination address, the computer-readable program instructions, upon being executed by a computer, causing the computer to perform the operations comprising:
- receiving the destination address;
- determining that the destination address is a domain name;
- comparing the domain name with a database of legitimate domain names;
- determining that the domain name does not match an entry in the database of legitimate domain names;
- analyzing the domain name to determine that the domain name is a dishonest transformation of a legitimate domain name by determining a similarity value between the domain name and the legitimate domain name exceeds a predetermined value, the similarity value being based upon a longest common subsequence between the domain name and the legitimate domain name;
- classifying the destination address as a fraudulent address;
- and
- taking an appropriate action in response to classifying the destination address as a fraudulent address.
A computer hardware device for processing a destination address, comprising a processor configured to perform the following steps:
- receiving the destination address;
- determining that the destination address is a domain name;
- comparing the domain name with a database of legitimate domain names;
- determining that the domain name does not match an entry in the database of legitimate domain names;
- analyzing the domain name to determine that the domain name is a dishonest transformation of a legitimate domain name by determining a similarity value between the domain name and the legitimate domain name exceeds a predetermined value, the similarity value being based upon a longest common subsequence between the domain name and the legitimate domain name;
- classifying the destination address as a fraudulent address;
- and
- taking an appropriate action in response to classifying the destination address as a fraudulent address.
A computer-implemented method of processing a domain name to be registered, the method comprising:
- receiving, within a computer hardware device, the domain name;
- comparing the domain name with a database of registered domain names to that the domain name has not already been registered;
- analyzing the domain name to determine that the domain name is a dishonest transformation of a registered domain name by determining a similarity value between the domain name and the registered domain name exceeds a predetermined value, the similarity value being based upon a longest common subsequence between the domain name and the registered domain name;
- and
- disallowing the domain name from being registered.
A computer-readable memory having stored thereon computer-readable program instructions for processing a domain name to be registered, the computer-readable program instructions, upon being executed by a computer, causing the computer to perform the operations comprising
- receiving the domain name;
- comparing the domain name with a database of registered domain names to determine that the domain name has not already been registered;
- analyzing the domain name to determine that the domain name is a dishonest transformation of a registered domain name by determining a similarity value between the domain name and the registered domain name exceeds a predetermined value, the similarity value being based upon a longest common subsequence between the domain name and the registered domain name;
- and
- disallowing the domain name from being registered.
A computer hardware device for processing a domain name to be registered, comprising a processor configured to perform the following steps:
- receiving the domain name;
- comparing the domain name with a database of registered domain names to determine that the domain name has not already been registered;
- analyzing the domain name to determine that the domain name is a dishonest transformation of a registered domain name by determining a similarity value between the domain name and the registered domain name exceeds a predetermined value, the similarity value being based upon a longest common subsequence between the domain name and the registered domain name;
- and
- disallowing the domain name from being registered.
Dependencies are inferred from the claim text.