Palo Alto Networks (israel Analytics) Ltd.

Dekel Paz

Jonathan Allon

Yinnon Meshi

Idan Amit

Eyal Firstenberg

Yaron Neuman

A method, including collecting information on data transmitted at respective times between multiple endpoints and multiple Internet sites having respective domains, and acquiring, from one or more external or internal sources, maliciousness information for the domains. An access time profile is generated based on the times of the transmissions to the domains, and a popularity profile is generated based on the transmissions to the domains. A malicious domain profile is generated based on the acquired maliciousness information, and the collected information is modeled using the access time profile, the popularity profile and the malicious domain profile. Based on their respective modeled collected information, one or more of the domains is predicted to be suspicious, and an alert is generated for the one or more identified domains.

Growing community of inventors

Ramat Gan, Israel

Dekel Paz