发明名称 SYSTEMS AND METHODS FOR DETERMINING MALICIOUS-DOWNLOAD RISK BASED ON USER BEHAVIOR
摘要 The disclosed computer-implemented method for determining malicious-download risk based on user behavior may include (1) identifying a set of users that are at high risk for malicious downloads and a set of users that are at low risk for malicious downloads, (2) determining a high-risk pattern of download behavior that is shared by the set of high-risk users and that is not shared by the set of low-risk users, (3) analyzing download behavior of an uncategorized user over a predefined time period in order to categorize the download behavior as high-risk or low-risk, and (4) categorizing the uncategorized user as a high-risk user in response to determining that the download behavior of the uncategorized user falls within a predefined similarity threshold of the high-risk pattern of download behavior. Various other methods, systems, and computer-readable media are also disclosed. Various other methods, systems, and computer-readable media are also disclosed.
申请公布号 US2016366167(A1) 申请公布日期 2016.12.15
申请号 US201514739385 申请日期 2015.06.15
申请人 Symantec Corporation 发明人 Yumer Leylya
分类号 H04L29/06 主分类号 H04L29/06
代理机构 代理人
主权项 1. A computer-implemented method for determining malicious-download risk based on user behavior, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying a set of users that are at high risk for malicious downloads and a set of users that are at low risk for malicious downloads; determining a high-risk pattern of download behavior that is shared by the set of high-risk users and that is not shared by the set of low-risk users; analyzing download behavior of an uncategorized user over a predefined time period in order to categorize the download behavior as high-risk or low-risk; categorizing the uncategorized user as a high-risk user in response to determining that the download behavior of the uncategorized user falls within a predefined similarity threshold of the high-risk pattern of download behavior.
地址 Mountain View CA US