公开(公告)号：US20180063174A1

公开(公告)日：2018-03-01

申请号：US15247036

申请日：2016-08-25

Applicant: Cisco Technology, Inc.

Inventor： Martin Grill ,  Jan Kohout ,  Martin Kopp ,  Thomas Pevny

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L63/1425 ,  H04L61/1511 ,  H04L63/0236 ,  H04L63/1441 ,  H04L63/164 ,  H04L67/02

Abstract: Detecting illegitimate typosquatting with Internet Protocol (IP) information includes, at a computing device having connectivity to a network, obtaining a list of domains and filtering the list to generate a list of monitored domain strings. IP information is passively determined for domains associated with each of the monitored domain strings. A domain requested in network traffic for the network is identified as a candidate typosquatting domain and the candidate typosquatting domain is determined to be an illegitimate typosquatting domain based at least on the IP information. An action is initiated related to the illegitimate typosquatting domain.