The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jul. 08, 2025

Filed:

Jan. 30, 2024
Applicant:

Proofpoint, Inc., Sunnyvale, CA (US);

Inventors:

Brian Sanford Jones, Cary, NC (US);

Zachary Mitchell Abzug, Durham, NC (US);

Jeremy Thomas Jordan, Raleigh, NC (US);

Giorgi Kvernadze, Salt Lake City, UT (US);

Dallan Quass, Lindon, UT (US);

Assignee:

Proofpoint, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); G06F 16/51 (2019.01); G06F 16/955 (2019.01); G06F 18/21 (2023.01); G06F 21/56 (2013.01); G06N 3/08 (2023.01); G06N 20/00 (2019.01); G06N 20/10 (2019.01);
U.S. Cl.
CPC ...
H04L 63/1483 (2013.01); G06F 16/51 (2019.01); G06F 16/9566 (2019.01); G06F 18/217 (2023.01); G06F 21/56 (2013.01); G06N 3/08 (2013.01); G06N 20/00 (2019.01); G06N 20/10 (2019.01); H04L 63/1408 (2013.01); H04L 63/1416 (2013.01); H04L 63/1441 (2013.01); G06V 2201/09 (2022.01);
Abstract

Aspects of the disclosure relate to detecting and identifying malicious sites using machine learning. A computing platform may receive a uniform resource locator (URL). The computing platform may parse and/or tokenize the URL to reduce the URL into a plurality of components. The computing platform may identify human-engineered features of the URL. The computing platform may compute a vector representation of the URL to identify deep learned features of the URL. The computing platform may concatenate the human-engineered features of the URL to the deep learned features of the URL, resulting in a concatenated vector representation. By inputting the concatenated vector representation of the URL to a URL classifier, the computing platform may compute a phish classification score. In response to determining that the phish classification score exceeds a first phish classification threshold, the computing platform may cause a cybersecurity server to perform a first action.


Find Patent Forward Citations

Loading…