PROACTIVELY DISCOVERING MALICIOUS DOMAINS THROUGH GUIDED CRAWLING OF ATTACK INFRASTRUCTURE
卷宗概要
发明人
Mohamed Yoosuf Mohamed Nabeel; Keerthiraj Nagaraj; Shehroze Farooqi; William Russell Melicher; Oleksii Starov
IPC 分类
CPC 分类
The present application discloses a method, system, and computer system for proactively discovering malicious domains through a guided crawling of attack infrastructure. The method includes (i) determining a set of toxic network neighborhoods on the internet, (ii) expanding one or more network graphs for the set of toxic network neighborhoods; (iii) determining a set of domains expected to be malicious from the set of toxic network neighborhoods, and (iv) performing an action based at least in part on the set of domains expected to be malicious. A particular toxic network neighborhood shares a plurality of hosting environments.
原文（中文）
The present application discloses a method, system, and computer system for proactively discovering malicious domains through a guided crawling of attack infrastructure. The method includes (i) determining a set of toxic network neighborhoods on the internet, (ii) expanding one or more network graphs for the set of toxic network neighborhoods; (iii) determining a set of domains expected to be malicious from the set of toxic network neighborhoods, and (iv) performing an action based at least in part on the set of domains expected to be malicious. A particular toxic network neighborhood shares a plurality of hosting environments.