Systems and methods for risk rating and pro-actively detecting malicious online ads

摘要

Methods and systems for risk rating and pro-actively detecting malicious online ads are described. In one example embodiment, a system for risk rating and pro-actively detecting malicious online ads includes an extraction module, an analysis engine, and a filter module. The extraction module is configured to extract a SWF file from a web page downloaded by the system. The analysis engine is communicatively coupled to the extraction module. The analysis engine is configured to determine a risk rating for the SWF file and send the risk rating to a web application for display. In an example, determining the risk rating includes locating an embedded redirection URL and determining a risk rating for the embedded redirection URL. The filter module is configured to determine, based on the risk rating, whether to block the SWF file and send a warning to the web application for display.

主权项

1. A non-transitory machine readable medium on which are stored instructions, comprising instructions that when executed cause a programmable device to:
receive a web page including a SWF (small web format) file dynamically included in the web page as the web page is provided to the programmable device; locate an embedded redirection URL (uniform resource locator) contained within the SWF file; obtain a risk rating for the embedded redirection URL from a risk database if the risk rating for the embedded redirection URL is available in the risk database; generate the risk rating for the embedded redirection URL when the risk rating for the embedded redirection URL was not obtained from the risk database; and generate a risk rating for the SWF file based at least in part on the risk rating for the embedded redirection URL.