International Business Machines Corporation

Jacobus P Lodewijkx

Cheng-Ta Lee

Gideon Zenz

Bo-Yu Kuo

Andrii Sergeevich Iesiev

A computer-implemented method, a computer program product, and a computer system for creating malware domain sinkholes by domain clustering. The computer system clusters malware domains into domain clusters. The computer system collects domain metrics in the domain clusters. The computer system sorts clustered malware domains in the respective ones of the domain clusters, based on the domain metrics. The computer system selects, from the clustered malware domains in the respective ones of the domain clusters, a predetermined number of top domains as candidates of respective domain sinkholes, wherein the respective domain sinkholes are created for the respective ones of the domain clusters.

Growing community of inventors

Oakton, VA, United States of America

Jacobus P Lodewijkx