Detecting misuse of trusted seals

摘要

Misuse of a trusted seal by a website is detected. Web browsing activities at a client are monitored. Upon detecting a website visited by the client, the client requests evaluation of the website by a security server. The security server replies with a reputation score indicating whether the website is trustworthy. If the website is not trustworthy, perceptual hashes of selected images in the website are computed and compared with perceptual hashes of known trusted seals. If there is a match between the hash of a website image and the hash of a seal image, a query is made as to whether the website is authorized to use the trusted seal. If the website is not authorized to use the seal, the website is reported to be misusing the trusted seal.

主权项

1. A computer-implemented method of detecting misuse of a trusted seal by a website having a plurality of images, the method comprising:
using a computer processor to perform steps comprising:
detecting that a larger image of the website contains a plurality of smaller images;extracting the plurality of smaller images from the larger image;determining whether spatial dimensions of the plurality of extracted smaller images are similar to spatial dimensions of images of trusted seals issued by known trusted parties to websites certified as using appropriate security procedures;selecting at least one extracted image of the website for comparison responsive to spatial dimensions of the selected image being similar to spatial dimensions of an image of a trusted seal;comparing the selected image of the website to the image of the trusted seal to determine a perceptual distance between the selected image and the image of the trusted seal;responsive to the comparison indicating that the selected image of the website matches the image of the trusted seal based on the determined perceptual distance, verifying that the website is authorized to use the trusted seal; andresponsive to the verification indicating that the website is not authorized to use the trusted seal, reporting that the website is misusing the trusted seal.