Riskiq, Inc.

Microsoft Technology Licensing, LLC

Pacific Industrial Development Corporation

Nick Goodman

Chris Kiernan

Jonas Edgeworth

Elias Manousos

Wei Wu

Adam Hunt

David Pon

David Shepard

Joseph Linn

John Novak

Jeffrey Lachapelle

The present disclosure generally relates to web page analysis, and more particularly to detecting malicious behavior using an accomplice model. In certain embodiments, the accomplice model may determine that a URI is associated with malicious behavior based upon the URI being associated with an attribute determined to be related to malicious behavior. Examples of an attribute include a host system, a domain, or an element of a document used to render the web page. Examples of an element of a document used to render the web page may include an active/dynamic element (e.g., a function, a script, etc.) or an inactive/static element (e.g., a string, a number, a frame, a tracking username, a social networking username, etc.).

Detecting malicious behavior using an accomplice model

Techniques for detecting malicious behavior using an accomplice model

Growing community of inventors

San Mateo, CA, United States of America

Nick Goodman