Patent ID: 11924245
Assignee: FORCEPOINT LLC
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. An information handling system configured as an electronic mail server for an enterprise network, and comprising:
a processor;
a network interface, coupled to the processor, and communicatively coupled to the enterprise network;
a first memory, storing instructions executable by the processor and configured to
extract a uniform resource locator (URL) address embedded in an electronic mail (email) message received by the network interface,
determine whether the extracted URL comprises one or more features associated with a phishing URL, the one or more features associated with a phishing URL being pre-determined by training a machine-learning classifier,
extract body text from the email message,
determine whether the extracted body text comprises one or more features associated with a phishing email message, the one or more features associated with a phishing URL being pre-determined by training the machine-learning classifier, and
classify the email message as one of phishing or not phishing using the determinations associated with the extracted URL and the extracted body text.