System, method, and computer program product for presenting an indicia of risk associated with search results within a graphical user interface

• US 8,826,154 B2
• Filed: 03/27/2012
• Issued: 09/02/2014
• Est. Priority Date: 05/03/2005
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Dixon, Christopher John, Pinckney, Thomas
• Primary Examiner(s): ITURRALDE, ENRIQUE W
• Application Number:
  US13/431,873
• Publication Number:
  US 20120185942A1
• Time in Patent Office: 889 Days
• Field of Search: 715/760
• US Class Current: 715/760
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06F 2221/2139 Recurrent verification
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12

Abstract

A system, method, and computer program product comprise presenting a plurality of search results within a graphical user interface. Further, an indicia of risk associated with the search results is presented, in real-time, within the graphical user interface.

Claims

1. A method, comprising:

presenting a plurality of search results within a graphical user interface;

presenting an indicia of risk associated with one or more of the plurality of search results within the graphical user interface;

presenting an indication within the graphical user interface that a particular website within the plurality of search results has been determined to request personal information from a user; and

providing one or more links to at least one alternative website that offers alternative content to that of the particular website and offers a higher reputational characteristic for managing personal information than the particular website;

wherein the at least one alternative website is determined using categorization data in a process that includes;

identifying a popular category of web content; and

selecting the at least one alternative website based on its respective popularity and security characteristics.

2. The method of claim 1, wherein the indicia of risk is presented as a risk based icon for each link of the plurality of search results.

3. The method of claim 1, wherein the indication includes a warning window within the graphical user interface.

4. The method of claim 1, wherein the indication includes a recommendation to the user based on a reputational characteristic of the particular website.

5. The method of claim 1, wherein the determination that the particular website requests information from the user is based upon an analysis which determines that an object on the particular website requests personal information from the user.

6. The method of claim 5, wherein the analysis includes an analysis involving a heuristic.

7. The method of claim 6, wherein the heuristic includes one or more of a country in which a network address for the particular website is located, registration status of a domain name for the particular website, age of a domain name for the particular website, whether the particular website contains forms, whether the particular website is hosted on a site known to allow third parties to create their own Web pages, whether the particular website'"'"'s network address is in an Internet Service Provider'"'"'s (ISP'"'"'s) DHCP assigned address range, whether a secure protocol is used to protect the particular website, whether client side scripting is used by the particular website, the number and type of grammar errors on the particular website, and whether content on the particular website uses images or other content obtained from financial organizations.

8. The method of claim 5, wherein the analysis includes an automatic analysis.

9. The method of claim 5, wherein the analysis includes a dynamic analysis of an executable.

10. The method of claim 1, wherein the indicia of risk is presented as a risk based icon for each link of the plurality of search results.

11. The method of claim 1, wherein the indicia of risk is presented as a risk based icon for each sponsored link displayed on a page associated with the plurality of search results.

12. The method of claim 1, wherein in response to the indicia of risk being associated with a low reputation site the indication includes at least one link to initiate a virus scan.

13. The method of claim 1, wherein in response to the indicia of risk for a link of the plurality of search results being associated with a low reputation site, the link associated with the indicia of risk is colored differently from other links that are not associated with a low reputation site.

14. The method of claim 1, wherein the plurality of search results are filtered according to the indicia of risk associated with the at least one of the plurality of search results.

15. The method of claim 1, wherein the selecting of the at least one alternative website based on its respective popularity includes selecting the at least one alternative website based on its respective popularity within the identified popular category.

16. The method of claim 1, wherein the reputation characteristic of the particular website is determined using a link structure analysis of the particular website.

17. The method of claim 1 further comprising presenting a summary of information extracted from one or more End User License Agreements (EULAs) associated with the particular website.

18. The method of claim 1, wherein the alternative content includes content similar to that of the particular website.

19. A computer program product embodied on a non-transitory computer readable medium for performing operations, comprising:

presenting a plurality of search results within a graphical user interface;

presenting an indicia of risk associated with one or more of the plurality of search results within the graphical user interface;

presenting an indication within the graphical user interface that a particular website within the plurality of search results has been determined to request personal information from a user; and

providing one or more links to at least one alternative website that offers content similar to that of the particular website and offers a higher reputational characteristic for managing personal information than the particular website;

wherein the at least one alternative website is determined using categorization data in a process that includes;

identifying a popular category of web content; and

selecting the at least one alternative website based on its respective popularity and security characteristics.

20. A system including a non-transitory computer readable medium, comprising:

a graphical user interface for;

presenting a plurality of search results within a graphical user interface;

presenting an indicia of risk associated with one or more of the plurality of search results within the graphical user interface;

presenting an indication within the graphical user interface that a particular website within the plurality of search results has been determined to request personal information from a user; and

providing one or more links to at least one alternative website that offers content similar to that of the particular website and offers a higher reputational characteristic for managing personal information than the particular website;

wherein the at least one alternative website is determined using categorization data in a process that includes;

identifying a popular category of web content; and

selecting the at least one alternative website based on its respective popularity and security characteristics.