Patent ID: 11948379
Assignee: CAPITAL ONE SERVICES, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 11:
12. A method comprising:
receiving an email addressed to a user;
separating the email into a plurality of semi-structured or unstructured email components;
analyzing each of the plurality of semi-structured or unstructured email components using different machine-learning techniques based on whether an email component of the plurality of semi-structured or unstructured email components is semi-structured or unstructured;
providing the analysis of each of the plurality of semi-structured or unstructured email components to a stacked ensemble analyzer comprising a nonparametric model;
determining, based on an output of the stacked ensemble analyzer, that the email is potentially malicious;
outputting the email to a computer a computing device;
receiving, from the computing device, an indication that the email is potentially malicious; and
updating the machine-learning techniques, responsive to the indication, by:
updating a training corpus of malicious emails to include the email; and
incrementally retraining the machine-learning techniques based on the training corpus.