The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 07, 2020

Filed:

Apr. 16, 2019
Applicant:

Proofpoint, Inc., Sunnyvale, CA (US);

Inventors:

Angelo Starink, Morgan Hill, CA (US);

David Knight, Belmont, CA (US);

Assignee:

Proofpoint, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/56 (2013.01); H04L 29/06 (2006.01); H04L 12/58 (2006.01); G06F 16/22 (2019.01); G06F 16/951 (2019.01); G06F 16/955 (2019.01); G06F 21/55 (2013.01); G06F 21/53 (2013.01); H04L 29/08 (2006.01);
U.S. Cl.
CPC ...
H04L 63/1441 (2013.01); G06F 16/22 (2019.01); G06F 16/951 (2019.01); G06F 16/9558 (2019.01); G06F 16/9566 (2019.01); G06F 21/53 (2013.01); G06F 21/554 (2013.01); G06F 21/567 (2013.01); H04L 51/12 (2013.01); H04L 63/0245 (2013.01); H04L 63/0281 (2013.01); H04L 63/123 (2013.01); H04L 63/1408 (2013.01); H04L 63/1416 (2013.01); H04L 63/1425 (2013.01); H04L 63/1466 (2013.01); H04L 63/1483 (2013.01); G06F 2221/2115 (2013.01); G06F 2221/2119 (2013.01); H04L 67/02 (2013.01);
Abstract

Methods and corresponding systems for malicious message detection and processing are provided herein. According to example embodiments, a method includes detecting, via an intermediary node, a link included in a message, the link being associated with an unknown resource. The intermediary node may have a processor and a memory for storing executable instructions to perform the method. The example method further includes hashing a unique identifier for a recipient of the message; coupling the hashed identifier with the link to create an updated link, and replacing the link in the message with the updated link. The method may include causing forwarding of the updated message to a recipient. Clicking on or otherwise selecting the updated link by the one or more recipients of the message may be tracked. The method may include mapping the hashed identifier to the unique identifier of each of the one or more recipients.


Find Patent Forward Citations

Loading…