Systems and methods for using client reputation data to classify web domains

摘要

A computer-implemented method for using client reputation data to classify web domains may include identifying a web domain. The computer-implemented method may also include identifying at least one client that has attempted to access the web domain. The computer-implemented method may further include identifying a reputation associated with the client that attempted to access the web domain. The computer-implemented method may additionally include classifying the web domain based at least in part on the reputation of the client that attempted to access the web domain. Various other methods, systems, and computer-readable media are also disclosed.

主权项

1. A computer-implemented method for using client reputation data to classify web domains, the method comprising:
identifying, at a server-side computing device that comprises at least one processor, a web domain; identifying, at the server-side computing device, a plurality of applications that previously attempted to access the web domain; identifying, at the server-side computing device, at least one client device that previously attempted to access the web domain at least in part by receiving information from the client device that indicates that an attempt by the client device to access the web domain triggered a security event; calculating, at the server-side computing device, a proportion of applications within the plurality of applications that have a reputation for being malicious; classifying, at the server-side computing device, the web domain based at least in part on the calculated proportion of applications, of the plurality of applications that previously attempted to access the web domain, that have the reputation for being malicious.