专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08997220B2 Automatic detection of search results poisoning attacks 有权
标题翻译：自动检测搜索结果中毒攻击
公开(公告)号：US08997220B2
公开(公告)日：2015-03-31
申请号：US13116012
申请日：2011-05-26
申请人： Fang Yu , Yinglian Xie , Martin Abadi , John P. John , Arvind Krishnamurthy
发明人： Fang Yu , Yinglian Xie , Martin Abadi , John P. John , Arvind Krishnamurthy
IPC分类号： G06F11/00 , G06F21/56 , H04L29/06 , G06F12/14 , G06F7/04 , G06F17/30
CPC分类号： G06F21/56 , H04L63/1408 , H04L63/1466 , H04L63/168
摘要： Search result poisoning attacks may be automatically detected by identifying groups of suspicious uniform resource locators (URLs) containing multiple keywords and exhibiting patterns that deviate from other URLs in the same domain without crawling and evaluating the actual contents of each web page. Suspicious websites are identified and lexical features are extracted for each such website. The websites are clustered based on their lexical features, and group analysis is performed on each group to identify at least one suspicious group. Other implementations are directed to detecting a search engine optimization (SEO) attack by processing a large population of URLs to identify suspicious URLs based on the presence of a subset of keywords in each URL and the relative newness of each URL.
摘要翻译：搜索结果中毒攻击可以通过识别包含多个关键字的可疑统一资源定位器（URL）的组，并且在不进行爬行和评估每个网页的实际内容的同一领域中展示不同于其他URL的模式来检测。识别可疑网站，为每个此类网站提取词汇功能。这些网站根据其词汇特征进行聚类，并对每个组进行组分析，以确定至少一个可疑组。其他实现涉及通过处理大量URL来检测搜索引擎优化（SEO）攻击，以基于每个URL中的关键字的存在以及每个URL的相对新颖度来识别可疑URL。

2. 发明申请

US20120304287A1 AUTOMATIC DETECTION OF SEARCH RESULTS POISONING ATTACKS 有权
标题翻译：搜索结果自动检测点击次数
公开(公告)号：US20120304287A1
公开(公告)日：2012-11-29
申请号：US13116012
申请日：2011-05-26
申请人： Fang Yu , Yinglian Xie , Martin Abadi , John P. John , Arvind Krishnamurthy
发明人： Fang Yu , Yinglian Xie , Martin Abadi , John P. John , Arvind Krishnamurthy
IPC分类号： G06F21/00
CPC分类号： G06F21/56 , H04L63/1408 , H04L63/1466 , H04L63/168
摘要： Search result poisoning attacks may be automatically detected by identifying groups of suspicious uniform resource locators (URLs) containing multiple keywords and exhibiting patterns that deviate from other URLs in the same domain without crawling and evaluating the actual contents of each web page. Suspicious websites are identified and lexical features are extracted for each such website. The websites are clustered based on their lexical features, and group analysis is performed on each group to identify at least one suspicious group. Other implementations are directed to detecting a search engine optimization (SEO) attack by processing a large population of URLs to identify suspicious URLs based on the presence of a subset of keywords in each URL and the relative newness of each URL.
摘要翻译：搜索结果中毒攻击可以通过识别包含多个关键字的可疑统一资源定位器（URL）的组，并且在不进行爬行和评估每个网页的实际内容的同一领域中展示不同于其他URL的模式来检测。识别可疑网站，为每个此类网站提取词汇功能。这些网站根据其词汇特征进行聚类，并对每个组进行组分析，以确定至少一个可疑组。其他实现涉及通过处理大量URL来检测搜索引擎优化（SEO）攻击，以基于每个URL中的关键字的存在以及每个URL的相对新颖度来识别可疑URL。

3. 发明授权

US08434150B2 Using social graphs to combat malicious attacks 有权
标题翻译：使用社交图来对抗恶意攻击
公开(公告)号：US08434150B2
公开(公告)日：2013-04-30
申请号：US13070497
申请日：2011-03-24
申请人： Yinglian Xie , Fang Yu , Martin Abadi , Eliot C. Gillum , Junxian Huang , Zhuoqing Morley Mao , Jason D. Walter , Krishna Vitaldevara
发明人： Yinglian Xie , Fang Yu , Martin Abadi , Eliot C. Gillum , Junxian Huang , Zhuoqing Morley Mao , Jason D. Walter , Krishna Vitaldevara
IPC分类号： H04L29/06
CPC分类号： H04L63/145 , H04L51/12
摘要： Detection of user accounts associated with spammer attacks may be performed by constructing a social graph of email users. Biggest connected components (BCC) of the social graph may be used to identify legitimate user accounts, as the majority of the users in the biggest connected components are legitimate users. BCC users may be used to identify more legitimate users. Using degree-based detection techniques and PageRank based detection techniques, the hijacked user accounts and spammer user accounts may be identified. The users' email sending and receiving behaviors may also be examined, and the subgraph structure may be used to detect stealthy attackers. From the social graph analysis, legitimate user accounts, malicious user accounts, and compromised user accounts can be identified.
摘要翻译：可以通过构建电子邮件用户的社交图来执行与垃圾邮件发送者攻击相关联的用户帐户的检测。社交图的最大连接组件（BCC）可用于识别合法用户帐户，因为最大连接组件中的大多数用户是合法用户。 BCC用户可能用于识别更多的合法用户。使用基于程度的检测技术和基于PageRank的检测技术，可以识别被劫持的用户帐户和垃圾邮件发送者用户帐户。还可以检查用户的电子邮件发送和接收行为，并且子图结构可以用于检测隐身攻击者。从社交图分析，可以识别合法用户帐户，恶意用户帐户和受影响的用户帐户。

4. 发明申请

US20130185791A1 VOUCHING FOR USER ACCOUNT USING SOCIAL NETWORKING RELATIONSHIP 有权
标题翻译：使用社交网络关系为用户帐户提供支付
公开(公告)号：US20130185791A1
公开(公告)日：2013-07-18
申请号：US13350806
申请日：2012-01-15
申请人： Yinglian Xie , Fang Yu , Qifa Ke , Martin Abadi , Eliot C. Gillum , Krishna Vitaldevara , Jason D. Walter
发明人： Yinglian Xie , Fang Yu , Qifa Ke , Martin Abadi , Eliot C. Gillum , Krishna Vitaldevara , Jason D. Walter
IPC分类号： G06F21/00
CPC分类号： G06F21/316 , G06F21/33 , G06Q50/01
摘要： Trusted user accounts of an application provider are determined. Graphs, such as trees, are created with each node corresponding to a trusted account. Each of the nodes is associated with a vouching quota, or the nodes may share a vouching quota. Untrusted user accounts are determined. For each of these untrusted accounts, a trusted user account that has a social networking relationship is determined. If the node corresponding to the trusted user account has enough vouching quota to vouch for the untrusted user account, then the quota is debited, a node is added for the untrusted user account to the graph, and the untrusted user account is vouched for. If not, available vouching quota may be borrowed from other nodes in the graph.
摘要翻译：确定应用程序提供程序的可信用户帐户。使用与受信任帐户相对应的每个节点来创建诸如树之类的图形。每个节点都与一个备份配额相关联，或者节点可以共享一个备份配额。不信任的用户帐户被确定。对于每个这些不受信任的帐户，确定具有社交网络关系的可信用户帐户。如果与受信任用户帐户相对应的节点具有足够的备用配额来保证不受信任的用户帐户，则会将配额扣除，为图中不可信任的用户帐户添加一个节点，并为不受信任的用户帐户进行验证。如果不是，可以从图中的其他节点借用可用的支票配额。

5. 发明授权

US08387145B2 Blocking malicious activity using blacklist 有权
标题翻译：使用黑名单阻止恶意活动
公开(公告)号：US08387145B2
公开(公告)日：2013-02-26
申请号：US12479860
申请日：2009-06-08
申请人： Yinglian Xie , Fang Yu , Martin Abadi
发明人： Yinglian Xie , Fang Yu , Martin Abadi
IPC分类号： G06F12/14 , G06F12/16
CPC分类号： H04L63/101 , H04L2463/144
摘要： An IP (Internet Protocol) address is a directly observable identifier of host network traffic in the Internet and a host's IP address can dynamically change. Analysis of traffic (e.g., network activity or application request) logs may be performed and a host tracking graph may be generated that shows hosts and their bindings to IP addresses over time. A host tracking graph may be used to determine host accountability. This can enable host-based blacklisting instead of the traditional IP address based blacklisting. Host tracking results can be leveraged for forensic analysis to understand an attacker's traces and identify malicious activities in a postmortem fashion. The host tracking information may be used to build a tracklist which can block future attacks.
摘要翻译： IP（互联网协议）地址是互联网中主机网络流量的直接可观察标识符，主机的IP地址可以动态更改。可以执行流量分析（例如，网络活动或应用请求）日志，并且可以生成显示主机及其与IP地址的绑定的主机跟踪图。可以使用主机跟踪图来确定主机责任。这可以启用基于主机的黑名单，而不是基于传统的基于IP地址的黑名单。主机跟踪结果可以用于法医分析，以了解攻击者的踪迹，并以死后的方式识别恶意活动。主机跟踪信息可用于构建可以阻止未来攻击的轨道列表。

6. 发明申请

US20120246720A1 USING SOCIAL GRAPHS TO COMBAT MALICIOUS ATTACKS 有权
标题翻译：使用社会格局来打击恶意攻击
公开(公告)号：US20120246720A1
公开(公告)日：2012-09-27
申请号：US13070497
申请日：2011-03-24
申请人： Yinglian Xie , Fang Yu , Martin Abadi , Eliot C. Gillum , Junxian Huang , Zhuoqing Morley Mao , Jason D. Walter , Krishna Vitaldevara
发明人： Yinglian Xie , Fang Yu , Martin Abadi , Eliot C. Gillum , Junxian Huang , Zhuoqing Morley Mao , Jason D. Walter , Krishna Vitaldevara
IPC分类号： G06F21/00
CPC分类号： H04L63/145 , H04L51/12
摘要： Detection of user accounts associated with spammer attacks may be performed by constructing a social graph of email users. Biggest connected components (BCC) of the social graph may be used to identify legitimate user accounts, as the majority of the users in the biggest connected components are legitimate users. BCC users may be used to identify more legitimate users. Using degree-based detection techniques and PageRank based detection techniques, the hijacked user accounts and spammer user accounts may be identified. The users' email sending and receiving behaviors may also be examined, and the subgraph structure may be used to detect stealthy attackers. From the social graph analysis, legitimate user accounts, malicious user accounts, and compromised user accounts can be identified.
摘要翻译：可以通过构建电子邮件用户的社交图来执行与垃圾邮件发送者攻击相关联的用户帐户的检测。社交图的最大连接组件（BCC）可用于识别合法用户帐户，因为最大连接组件中的大多数用户是合法用户。 BCC用户可能用于识别更多的合法用户。使用基于程度的检测技术和基于PageRank的检测技术，可以识别被劫持的用户帐户和垃圾邮件发送者用户帐户。还可以检查用户的电子邮件发送和接收行为，并且子图结构可以用于检测隐身攻击者。从社交图分析，可以识别合法用户帐户，恶意用户帐户和受影响的用户帐户。

7. 发明申请

US20110283360A1 IDENTIFYING MALICIOUS QUERIES 有权
标题翻译：识别恶意查询
公开(公告)号：US20110283360A1
公开(公告)日：2011-11-17
申请号：US12780935
申请日：2010-05-17
申请人： Martin Abadi , Yinglian Xie , Fang Yu , John Payyappillil John
发明人： Martin Abadi , Yinglian Xie , Fang Yu , John Payyappillil John
IPC分类号： G06F21/00
CPC分类号： H04L63/1416 , H04L63/0227
摘要： A framework identifies malicious queries contained in search logs to uncover relationships between the malicious queries and the potential attacks launched by attackers submitting the malicious queries. A small seed set of malicious queries may be used to identify an IP address in the search logs that submitted the malicious queries. The seed set may be expanded by examining all queries in the search logs submitted by the identified IP address. Regular expressions may be generated from the expanded set of queries and used for detecting yet new malicious queries. Upon identifying the malicious queries, the framework may be used to detect attacks on vulnerable websites, spamming attacks, and phishing attacks.
摘要翻译：框架识别搜索日志中包含的恶意查询，以发现恶意查询与攻击者提交恶意查询的潜在攻击之间的关系。可以使用小型种族恶意查询来标识提交恶意查询的搜索日志中的IP地址。可以通过检查由所标识的IP地址提交的搜索日志中的所有查询来扩展种子集。可以从扩展的查询集生成正则表达式，并用于检测新的恶意查询。在识别恶意查询后，该框架可用于检测对易受攻击网站的攻击，垃圾邮件攻击和网络钓鱼攻击。

8. 发明申请

US20100312877A1 HOST ACCOUNTABILITY USING UNRELIABLE IDENTIFIERS 有权
标题翻译：使用不可靠的身份认证的主机责任
公开(公告)号：US20100312877A1
公开(公告)日：2010-12-09
申请号：US12479882
申请日：2009-06-08
申请人： Yinglian Xie , Fang Yu , Martin Abadi
发明人： Yinglian Xie , Fang Yu , Martin Abadi
IPC分类号： G06F15/16
CPC分类号： H04L63/1408 , H04L2463/144
摘要： An IP (Internet Protocol) address is a directly observable identifier of host network traffic in the Internet and a host's IP address can dynamically change. Analysis of traffic (e.g., network activity or application request) logs may be performed and a host tracking graph may be generated that shows hosts and their bindings to IP addresses over time. A host tracking graph may be used to determine host accountability. To generate a host tracking graph, a host is represented. Host representations may be application-dependent. In an implementation, application-level identifiers (IDs) such as user email IDs, messenger login IDs, social network IDs, or cookies may be used. Each identifier may be associated with a human user. These unreliable IDs can be used to track the activity of the corresponding hosts.
摘要翻译： IP（互联网协议）地址是互联网中主机网络流量的直接可观察标识符，主机的IP地址可以动态更改。可以执行流量分析（例如，网络活动或应用请求）日志，并且可以生成显示主机及其与IP地址的绑定的主机跟踪图。可以使用主机跟踪图来确定主机责任。要生成主机跟踪图，表示主机。主机表示可能取决于应用程序。在实现中，可以使用诸如用户电子邮件ID，信使登录ID，社交网络ID或cookie的应用级标识符（ID）。每个标识符可以与人类用户相关联。这些不可靠的ID可用于跟踪相应主机的活动。

9. 发明授权

US08745738B2 Vouching for user account using social networking relationship 有权
标题翻译：使用社交网络关系为用户帐户提供支持
公开(公告)号：US08745738B2
公开(公告)日：2014-06-03
申请号：US13350806
申请日：2012-01-15
申请人： Yinglian Xie , Fang Yu , Qifa Ke , Martin Abadi , Eliot C. Gillum , Krishna Vitaldevara , Jason D. Walter
发明人： Yinglian Xie , Fang Yu , Qifa Ke , Martin Abadi , Eliot C. Gillum , Krishna Vitaldevara , Jason D. Walter
IPC分类号： G06F12/14 , G06F15/16 , G06F13/00 , H04L29/06 , G06F11/00
CPC分类号： G06F21/316 , G06F21/33 , G06Q50/01
摘要： Trusted user accounts of an application provider are determined. Graphs, such as trees, are created with each node corresponding to a trusted account. Each of the nodes is associated with a vouching quota, or the nodes may share a vouching quota. Untrusted user accounts are determined. For each of these untrusted accounts, a trusted user account that has a social networking relationship is determined. If the node corresponding to the trusted user account has enough vouching quota to vouch for the untrusted user account, then the quota is debited, a node is added for the untrusted user account to the graph, and the untrusted user account is vouched for. If not, available vouching quota may be borrowed from other nodes in the graph.
摘要翻译：确定应用程序提供程序的可信用户帐户。使用与受信任帐户相对应的每个节点来创建诸如树之类的图形。每个节点都与一个备份配额相关联，或者节点可以共享一个备份配额。不信任的用户帐户被确定。对于每个这些不受信任的帐户，确定具有社交网络关系的可信用户帐户。如果与受信任用户帐户相对应的节点具有足够的备用配额来保证不受信任的用户帐户，则会将配额扣除，为图中不可信任的用户帐户添加一个节点，并为不受信任的用户帐户进行验证。如果不是，可以从图中的其他节点借用可用的支票配额。

10. 发明授权

US08185613B2 Host accountability using unreliable identifiers 有权
标题翻译：使用不可靠的标识符托管问责制
公开(公告)号：US08185613B2
公开(公告)日：2012-05-22
申请号：US12479882
申请日：2009-06-08
申请人： Yinglian Xie , Fang Yu , Martin Abadi
发明人： Yinglian Xie , Fang Yu , Martin Abadi
IPC分类号： G06F17/30
CPC分类号： H04L63/1408 , H04L2463/144
摘要： An IP (Internet Protocol) address is a directly observable identifier of host network traffic in the Internet and a host's IP address can dynamically change. Analysis of traffic (e.g., network activity or application request) logs may be performed and a host tracking graph may be generated that shows hosts and their bindings to IP addresses over time. A host tracking graph may be used to determine host accountability. To generate a host tracking graph, a host is represented. Host representations may be application-dependent. In an implementation, application-level identifiers (IDs) such as user email IDs, messenger login IDs, social network IDs, or cookies may be used. Each identifier may be associated with a human user. These unreliable IDs can be used to track the activity of the corresponding hosts.
摘要翻译： IP（互联网协议）地址是互联网中主机网络流量的直接可观察标识符，主机的IP地址可以动态更改。可以执行流量分析（例如，网络活动或应用请求）日志，并且可以生成显示主机及其与IP地址的绑定的主机跟踪图。可以使用主机跟踪图来确定主机责任。要生成主机跟踪图，表示主机。主机表示可能取决于应用程序。在实现中，可以使用诸如用户电子邮件ID，信使登录ID，社交网络ID或cookie的应用级标识符（ID）。每个标识符可以与人类用户相关联。这些不可靠的ID可用于跟踪相应主机的活动。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式