Controlling access to Internet resources

摘要

In a method for controlling access to an Internet resource, a first plurality of Internet resource reputation vectors is collected 4001 and partitioned 4002 into a plurality of training sets. Preferably, each of the vectors comprises a plurality of weighted dimensions comprising: security history, legitimacy, behaviour, associations and location. Preferably the training sets comprise both good reputation and bad reputation Internet resources. A MED (Maximum Entropy Discrimination) classifier is trained 4003 with the plurality of training sets for a specific local area network and tested 4004 using a second plurality of Internet resource reputation vectors unknown to the trained MED classifier. The tested MED classifier is evaluated 4005 and feedback is provided 4006 to the evaluated MED classifier. Once trained, tested and evaluated 4007, the MED classifier is used at a local area network for managing access to an Internet resource, preferably located at a security appliance.