The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 10, 2024

Filed:

Sep. 12, 2023
Applicant:

Proofpoint, Inc., Sunnyvale, CA (US);

Inventors:

Brian Sanford Jones, Cary, NC (US);

Zachary Mitchell Abzug, Durham, NC (US);

Jeremy Thomas Jordan, Raleigh, NC (US);

Giorgi Kvernadze, Salt Lake City, UT (US);

Dallan Quass, Lindon, UT (US);

Assignee:

Proofpoint, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); G06F 16/51 (2019.01); G06F 16/955 (2019.01); G06F 18/21 (2023.01); G06F 21/56 (2013.01); G06N 3/08 (2023.01); G06N 20/00 (2019.01); G06N 20/10 (2019.01);
U.S. Cl.
CPC ...
H04L 63/1483 (2013.01); G06F 16/51 (2019.01); G06F 16/9566 (2019.01); G06F 18/217 (2023.01); G06F 21/56 (2013.01); G06N 3/08 (2013.01); G06N 20/00 (2019.01); G06N 20/10 (2019.01); H04L 63/1408 (2013.01); H04L 63/1416 (2013.01); H04L 63/1441 (2013.01); G06V 2201/09 (2022.01);
Abstract

Aspects of the disclosure relate to detecting and identifying malicious sites using machine learning. A computing platform may receive image data of a graphical rendering of a resource available at a uniform resource locator (URL). The computing platform may compute a computer vision vector representation of the image data. The computing platform may compare the computer vision vector representation of the image data to stored numeric vectors representing page elements, resulting in a feature indicating whether the computer vision vector representation of the image data is visually similar to a known page element, and may input the feature to a classifier. The computing platform may receive, from the classifier, a phish classification score indicating a likelihood that the URL is malicious. In response to determining that the phish classification score exceeds a first phish classification threshold, the computing platform may cause a cybersecurity server to perform a first action.


Find Patent Forward Citations

Loading…