PROACTIVELY DISCOVERING MALICIOUS DOMAINS THROUGH GUIDED CRAWLING OF ATTACK INFRASTRUCTURE

原文（中国語）

The present application discloses a method, system, and computer system for proactively discovering malicious domains through a guided crawling of attack infrastructure. The method includes (i) determining a set of toxic network neighborhoods on the internet, (ii) expanding one or more network graphs for the set of toxic network neighborhoods; (iii) determining a set of domains expected to be malicious from the set of toxic network neighborhoods, and (iv) performing an action based at least in part on the set of domains expected to be malicious. A particular toxic network neighborhood shares a plurality of hosting environments.