METHODS AND SYSTEMS FOR IMPLEMENTING A PHISHING ASSESMENT

摘要

A system, method, and computer program product for implementing a phishing assessment that includes a phishing server that implements one or more phishing assessments; the phishing server: identifies legitimate target domain names to be used in the phishing assessment, generates one or more pseudo domain names and pseudo web pages, where the pseudo domain name are visually similar to an identified target domain name and the pseudo web page includes one or more characteristics and attributes of a legitimate web page.

主权项

1. A system for generating domain names for implementing a phishing assessment, the system comprising:
a phishing server that implements one or more phishing assessments of a target computer network or a target user of the target computer network; wherein the phishing server is implemented via one or more computer processors that, upon executing computer-executable instructions, causes the phishing server to functions as:
a target domain name identification unit that identifies one or more legitimate target domain names to be used in a phishing assessment; anda pseudo domain name generation unit that generates one or more pseudo domain names based on the identified one or more legitimate target domain names, wherein the generated one or more pseudo domain names are attack or fictitious domain names that are visually similar to the one or more legitimate target domain names, the generated one or more pseudo domain names being implemented in a phishing assessment to identify vulnerabilities in a target computer network.