Bank of America Corporation

Cody Dean Searl

Kelly Renee-Drop Keiter

Christopher Daniel Birch

Susan R Hart

Lisa Matthews

George Albero

Keaton Drake

Michael Robert Young

Edward Lee Traywick

Elizabeth R Liuzzo

Marci Landy

Michael Beveridge

Richard Martin Seymour Scot

David Joseph Walsh

Caleb G Mann

Stephen C Brown

Daniel Martin

Paul Swiencicki

Olga Kocharyan

Sanjay Arjun Lohar

Melissa Gordon Glenn

Kelly Keiter

John Scott Alston

An illustrative computing system for a weblink content scanning system scans an electronic message for the presence of one or more weblinks. The computing system accesses, in a sandbox computing environment, content linked to the one or more weblinks. The computing system generates a hash of the accessed content and/or content linked to weblinks accessible via the accessed content. The computing system scans the content accessed via the one or more weblinks for a presence of malicious content and categorizes the scanned content accessed via the one or more weblinks (e.g., safe, malicious, and the like), associates the categorization with each corresponding hash, and saves such information to a data store for future analysis. Based on a result of this analysis, the computing system allows delivery of the original electronic message or generates a modified electronic message for delivery to a recipient device.

Scanning of content in weblink

Apparatus and methods for providing an indicator of trustworthiness of a software application are provided. A program may receive information regarding the software application from a developer of the application. The program may analyze the application and determine that the application is trustworthy and secure. The program may then create a unique logo that may include various information to indicate to a user that the program has determined the application is trustworthy. The program may transmit the logo to the developer so the developer may incorporate the logo into the application. In an embodiment, the program may transmit the logo to a third-party application store for display on a page where the application is available.

Logos as visual indicators of trust in applications

A system for phishing domain detection receives a communication associated with a particular domain. The system extracts a first set of features from the communication, the first set of features including a name of the sender, a name of the domain, a time of receipt, a sentiment message, and attachment file associated with the communication. The system compares the first set of features with a second set of features associated with a historical communication labeled with a phishing domain. In response to determining that the first set of features corresponds to the second set of features, the system determines that the particular domain is the phishing domain.

Information security system and method for phishing domain detection

A system for preventing communications from detected phishing domains receives a communication associated with a particular domain. The system determines that the particular domain is a phishing domain. In response, in one embodiment, the system registers the particular domain in a Domain Name System (DNS) server to block the communication and future communications associated with the particular domain from being received at computing devices operably coupled with the DNS server. In another embodiment, the system registers the particular domain in the DNS server, such that the communication and future communications associated with the particular domain are re-routed to a particular server to monitor phishing activities implemented on the communications, where the phishing activities comprise attempting to obtain login credentials and private information associated with receivers of the communication and future communications.

Information security system and method for preventing communications from detected phishing domains

Embodiments of the present invention provide a system for providing selective security regulations associated with network communications to users. The system is configured for extracting user data associated with a user, identifying one or more characteristics based on the extracted user data, generating a custom security package for the user based on the one or more characteristics, displaying one or more options associated with the custom security package on a user device of the user, prompting the user to select at least one option from the one or more options, receiving the at least one option from the user, and deploying a functionality associated with the at least one option from the custom security package.

Selective security regulation for network communication

Aspects of the disclosure relate to improving user responses to cyber security threats. A computing platform may generate a test communication to simulate a potential cyber threat activity. Then, the computing platform may send, via the communication interface, the test communication to a user device associated with a target user. Then, the computing platform may receive, via the communication interface and from the user device, a response to the test communication. Subsequently, the computing platform may determine, based on the response, a threat awareness level for the target user, where the threat awareness level is indicative of a susceptibility of the target user to the potential cyber threat activity. Then, the computing platform may send, to the target user and based on the threat awareness level, an alert notification to counter the cyber threat activity.

User responses to cyber security threats

Embodiments of the present invention provide systems and methods for evaluating and weighting resource usage activity data. The system may establish a communicable link to a user device via a user application to receive resource activity data and historical data from one or more users or systems via multiple communication channels. The system may evaluate the historical data and determine evaluation criteria based on perceived chance of loss associated with particular metadata characteristics, and use the evaluation criteria as weighted metrics for determining an overall evaluation score for the user based on indication from resource activity data that the user has conducted resource transfers with entities or channels identified in the historical data.

System for evaluation and weighting of resource usage activity

Embodiments of the present invention provide systems and methods for generation and maintenance of verified data records. The system may receive a data submission from a user device over one or more communication channels and convert the data submission into a normalized text format for processing and analysis. The data submission may then be analyzed using one or more trained machined learning models in order to identify factual statements and modifiers within the data submission, and generate a confidence score of verified factual information based on corroboration with one or more additional data sources. Additionally, identified modifiers may be analyzed to determine positive or negative sentiment.

System for generation and maintenance of verified data records

Aspects of the disclosure relate to information security by identifying unique or related factors in common between individuals subject to a common threat vector. Data mining and data acquisition of public and non-public user information is performed to prevent, disrupt, and/or address criminal, cyber, and fraudulent threats. The information can be normalized into template(s) to align information across disparate datasets and enable efficient storage of the big data into appropriate fields to be tracked. The information can be stored in data warehouse(s) or in multidimensional data structure(s) for investigation if a threat vector against a group of individuals is detected. The multidimensional data can be analyzed to identify direct connections, common connecting entities, and/or connectivity clusters between individuals who were attacked or who may be attacked in the future. Remediation, machine learning, enhanced security, and/or vulnerability assessments may be implemented based on the results of the analysis.

Information security system based on multidimensional disparate user data

Verification of the identities of parties participating in network-based communication, such as telephone communication, including SMS/text communication, email communication and the like is provided. Communication identifiers (IDs) (e.g., telephone numbers, email addresses or the like) are verified as being associated with one or more communication parties and, in response, a verified communication (ID) database is established. The verified communication ID database is relied upon when a user/communication is selecting a communication ID as an address for an impending communication or receiving a communication for determining whether the communication ID is verifiably associated with a known communication party. If the communication ID is determined to be verifiably associated with a known communication party, a visual or audible output may be provided on the user's device or within the communication that indicates that the communication ID is verifiably associated with the known communication party.

Systems for verifying identities of parties participating in distributed network communication

A system for secure data transfer is provided. The system is configured to: generate a database of verified interaction providers comprising verified provider information; determine that a user device has accessed a data transfer location associated with an interaction provider; install a proxy server over the data transfer location, wherein data transfer traffic between the user device and the interaction provider is routed through and monitored by the proxy server; determine, via the proxy server, that the user device has requested an interaction at the data transfer location, the interaction comprising a data transfer; determine that the interaction provider associated with the data transfer location is in the database of verified interaction providers; and in response to determining that the interaction provider is in the database, complete the data transfer through the proxy server.

Secure data transfer system with integrated proxy gateway

Resource event patterns are identified in previously conducted resource events based on historical resource event data and, in some embodiments, pending and/or previous resource event request data. Specifically, the resource event patterns indicate a timing pattern for when resource events included in the pattern are conducted. Based at least on the timing pattern, an optimal time or time period is determined for communicating a notification to the user that is configured to notify a user that a next occurrence of a time within the timing pattern is imminent and that a resource event within the resource event pattern is pending. The optimal time may be close in proximity of the next occurrence of the time within the timing pattern or, depending on other factors, such as user preference, resource volume due, resource volume availability, resource volume due in comparison to typical resource volume due, the optimal time may be farther out from the next occurrence of a time within the timing pattern.

System for pattern recognition to customized resource usage

Aspects of the disclosure relate to a message processing platform for enhanced phishing message detection. A computing platform may receive a first message from a first source entity, where the first message was flagged as potentially malicious through selection of a malicious message button in a mobile banking application, and where the first message includes content from the first source entity pretending to be a second source entity different than the first source entity. Using one or more machine learning algorithms, the computing platform may parse the first message to identify the second source entity. The computing platform may identify an enterprise security system associated with the second source entity, and may generate a second message that includes the first message as an attachment and indicates that the first message was flagged as potentially malicious. Subsequently, the computing platform may send, to the enterprise security system, the second message.

Growing community of inventors

Pineville, NC, United States of America

Cody Dean Searl