Patent ID: 11924245
Assignee: FORCEPOINT LLC
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 10:
11. A method for identifying phishing email messages, the method comprising:
receiving, at a network interface coupled to an enterprise network, an electronic mail (email) message;
extracting a uniform resource locator (URL) address embedded in the email message;
determining whether the extracted URL comprises one or more features associated with a phishing URL, the one or more features associated with a phishing URL being pre-determined by training a machine-learning classifier;
extracting body text from the email message;
determining whether the extracted body text comprises one or more features associated with a phishing email message, the one or more features associated with a phishing URL being pre-determined by training the machine-learning classifier; and
classifying the email message as one of phishing or not phishing using the determinations associated with the extracted URL and the extracted body text.