URL Reputation System
First Claim
1. A method performed by a URL reputation client, said method being performed on a computer processor, said method comprising:
- receiving a first URL;
determining that said first URL is not present in a cached reputation database;
determining a set of variants for said first URL;
determining that a first variant is stored within said cached reputation database, said first variant having a first classification;
determining that said first classification is inheritable;
analyzing said cached reputation database to determine that a reputation server does not contain classification information about said first URL, said cached reputation database comprising probabilistic set membership keys; and
assigning said first classification to said first URL.
2 Assignments
0 Petitions
Accused Products
Abstract
A URL reputation system may have a reputation server and a client device with a cache of reputation information. A URL reputation query from the client to the server may return reputation data along with probabilistic set membership information for several variants of the requested URL. The client may use the probabilistic set membership information to determine if the reputation server has additional information for another related URL as well as whether the classifications are inheritable from one of the variants. If the probabilistic set membership determines that the reputation server may have additional information, a query may be made to the reputation server, otherwise the reputation may be inferred from the data stored in the cache.
-
Citations
20 Claims
-
1. A method performed by a URL reputation client, said method being performed on a computer processor, said method comprising:
-
receiving a first URL; determining that said first URL is not present in a cached reputation database; determining a set of variants for said first URL; determining that a first variant is stored within said cached reputation database, said first variant having a first classification; determining that said first classification is inheritable; analyzing said cached reputation database to determine that a reputation server does not contain classification information about said first URL, said cached reputation database comprising probabilistic set membership keys; and assigning said first classification to said first URL. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11)
-
-
12. A URL reputation server comprising:
-
a processor; a network connection; a URL reputation database; said processor configured to; receive a URL as part of a request for a URL reputation, said request being sent from a client device; determine said URL reputation and a probabilistic set membership key for said URL; and transmit said URL reputation and said probabilistic set membership key to said client device. - View Dependent Claims (13, 14, 15, 16, 17)
-
-
18. A URL reputation client comprising:
-
a processor; a network connection; a cached URL reputation database comprising reputation information for a plurality of URL addresses having a common second level domain name, and for each of said plurality of URL addresses, a probabilistic set membership key for lower level URL addresses, said probabilistic set membership key indicating availability of said lower level URL addresses in a URL reputation database available from a URL reputation server; said processor configured to; receive a first URL; determine that said first URL is not present in a cached URL reputation database; determine a first set of variants comprising variants for said first URL; determine that a first variant is stored within said cached reputation database, said first variant having a first classification; determine that said first classification is inheritable; analyze said cached reputation database to determine that said reputation server does not contain classification information about said first URL, said cached reputation database comprising probabilistic set membership keys; and assign said first classification to said first URL. - View Dependent Claims (19, 20)
-
Specification