公开(公告)号：US20120159620A1

公开(公告)日：2012-06-21

申请号：US13159978

申请日：2011-06-14

Applicant: Christian Seifert ,  Jack Stokes ,  Long Lu ,  David Heckerman ,  Christina Colcernian ,  Sasi Parthasarathy ,  Navaneethan Santhanam

Inventor： Christian Seifert ,  Jack Stokes ,  Long Lu ,  David Heckerman ,  Christina Colcernian ,  Sasi Parthasarathy ,  Navaneethan Santhanam

IPC: G06F21/00

CPC classification number: H04L63/1483 ,  H04L63/1416 ,  H04L63/168

Abstract: A machine-implemented method for detecting scareware includes the steps of accessing one or more landing pages to be evaluated, extracting one or more features from the landing pages, and providing a classifier to compare the features extracted from the landing pages with features of known scareware and non-scareware pages. The classifier determines a likelihood that the landing page is scareware. If determined to be scareware, the landing page is removed from search results generated by a search engine. The features can be URLs, text, image interest points, image descriptors, a number of pop-ups generated, IP addresses, hostnames, domain names, text derived from images, images, metadata, identifiers of executables, and combinations thereof.

Abstract translation: 用于检测scareware的机器实现的方法包括访问要评估的一个或多个着陆页，从着陆页提取一个或多个特征并提供分类器以将从着陆页提取的特征与已知scareware的特征进行比较的步骤 和非scareware页面。 分类器确定着陆页是scareware的可能性。 如果确定是scareware，则着陆页将从搜索引擎生成的搜索结果中删除。 特征可以是URL，文本，图像兴趣点，图像描述符，生成的弹出窗口的数量，IP地址，主机名，域名，从图像，图像，元数据，可执行文件的标识符以及它们的组合导出的文本。

公开(公告)号：US09130988B2

公开(公告)日：2015-09-08

申请号：US13159978

申请日：2011-06-14

Applicant: Christian Seifert ,  Jack Stokes ,  Long Lu ,  David Heckerman ,  Christina Colcernian ,  Sasi Parthasarathy ,  Navaneethan Santhanam

Inventor： Christian Seifert ,  Jack Stokes ,  Long Lu ,  David Heckerman ,  Christina Colcernian ,  Sasi Parthasarathy ,  Navaneethan Santhanam

IPC: H04L29/06 ,  G06F21/00

CPC classification number: H04L63/1483 ,  H04L63/1416 ,  H04L63/168

Abstract: A machine-implemented method for detecting scareware includes the steps of accessing one or more landing pages to be evaluated, extracting one or more features from the landing pages, and providing a classifier to compare the features extracted from the landing pages with features of known scareware and non-scareware pages. The classifier determines a likelihood that the landing page is scareware. If determined to be scareware, the landing page is removed from search results generated by a search engine. The features can be URLs, text, image interest points, image descriptors, a number of pop-ups generated, IP addresses, hostnames, domain names, text derived from images, images, metadata, identifiers of executables, and combinations thereof.

Abstract translation: 用于检测scareware的机器实现的方法包括访问要评估的一个或多个着陆页，从着陆页提取一个或多个特征并提供分类器以将从着陆页提取的特征与已知scareware的特征进行比较的步骤 和非scareware页面。 分类器确定着陆页是scareware的可能性。 如果确定是scareware，则着陆页将从搜索引擎生成的搜索结果中删除。 特征可以是URL，文本，图像兴趣点，图像描述符，生成的弹出窗口的数量，IP地址，主机名，域名，从图像，图像，元数据，可执行文件的标识符以及它们的组合导出的文本。