Cryptocurrency transaction pattern based threat intelligence

US11568416B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Markus Ludwig · Waltham, US
• Marc Noske · Kassel, DE
• Dirk Harz · Kassel, DE
• Johannes Noll · Heringen (Werra), DE
• Martin Steigemann · Fritzlar, DE

Key dates

• Filing date: Jun 24, 2019
• Grant date: Jan 31, 2023
• Expiry date: Jan 15, 2040

Classification

• Technology area (CPC G): Physics
• CPC primary: G06Q20/4014
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

A method for identification of malicious internet content and campaigns is provided. The method extracts a cryptocurrency indicator within a compromised data set and inserts the cryptocurrency indicator into a threat intelligence database. The method identifies a set of cryptocurrency transactions associated with the cryptocurrency indicator. From the cryptocurrency indicator and the set of cryptocurrency transactions, the method generates a transaction graph with a set of features representing the set of cryptocurrency transactions. The method modifies the threat intelligence database with at least a portion of the transaction graph.