The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 06, 2018

Filed:

Dec. 02, 2016
Applicant:

Narus, Inc., Sunnyvale, CA (US);

Inventors:

Ruben Torres, Sunnyvale, CA (US);

Hesham Mekky, Falcon Heights, MN (US);

Zhi-Li Zhang, Eden Prairie, MN (US);

Sabyasachi Saha, Sunnyvale, CA (US);

Antonio Nucci, San Jose, CA (US);

Assignee:

Narus, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/50 (2013.01); H04L 29/08 (2006.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01); G06F 21/50 (2013.01); H04L 63/14 (2013.01); H04L 63/1408 (2013.01); H04L 63/1441 (2013.01); H04L 63/168 (2013.01); H04L 67/02 (2013.01); H04L 67/10 (2013.01); H04L 67/42 (2013.01);
Abstract

A method for detecting malicious HTTP redirections. The method includes obtaining, based on a single client IP address, HTTP flows triggered by visiting a website, extracting a sequence of URLs where a downstream URL is extracted from a child HTTP request that is triggered by a parent HTTP request containing an immediate upstream URL, analyzing the URL sequence to generate a statistical feature, and classifying, based on the statistical feature, the HTTP flows as containing at least one malicious HTTP redirection triggered by visiting the website.


Find Patent Forward Citations

Loading…