Verizon Patent and Licensing Inc.

Threatconnect, Inc.

Wade Baker

Steven Thomas Archer

Peter Tippett

Gina M Ganley

Alex Guazzelli

Bhaskar Karambelkar

Richard M Barger

In some embodiments, an apparatus includes a memory and a processor operatively coupled to the memory. The processor is configured to receive a set of domain name resolutions associated with a domain. Each domain name resolution from the set of domain name resolutions includes a mapping between a domain name and an Internet Protocol (IP) address. The processor is then configured to determine, based on the set of domain name resolutions, a set of resolution metrics associated with a first geolocation and a set of resolution metrics associated with a second geolocation. The processor is also configured to compare and identify a role of an adversary infrastructure at the first geolocation and a role of an adversary infrastructure at the second geolocation, and subsequently send a signal such that a remedy response associated with at least one of the set of IP addresses or the domain name is initiated.

Methods and apparatus for identifying and characterizing computer network infrastructure involved in malicious activity

The security or other attributes of mobile applications may be assessed and assigned a security score. In one implementation, a device may obtain information relating to the mobile applications, and may determine, for each of the mobile applications, a number of security scores. Each of the security scores may define a level of risk for a security category relating to a mobile application. The device may further combine the security scores, for each of the mobile applications, to obtain, for each of the mobile applications, a final security score.

Mobile application security score calculation

Growing community of inventors

Leesburg, VA, United States of America

Wade Baker