Detecting malicious HTTP redirections using user browsing activity trees
US9912680B2 · kind B2 · utility
7Cited by
0References
20Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Dec 2, 2016 |
| Grant date | Mar 6, 2018 |
| Priority date | — |
| Expiry date | Dec 2, 2036 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/2119
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A method for detecting malicious HTTP redirections. The method includes obtaining, based on a single client IP address, HTTP flows triggered by visiting a website, extracting a sequence of URLs where a downstream URL is extracted from a child HTTP request that is triggered by a parent HTTP request containing an immediate upstream URL, analyzing the URL sequence to generate a statistical feature, and classifying, based on the statistical feature, the HTTP flows as containing at least one malicious HTTP redirection triggered by visiting the website.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.