Patent ID: 9398038
Filing Date: 2016-07-19
CPC Classification: H04L

Claim Text:
1. A method for identifying and processing email messages received at a remote computing device, comprising: generating, by a network device, a simulated phishing email wherein the simulated phishing email is a non-malicious email that resembles a real phishing attack by attempting to lure an individual into performing a target action on the remote computing device, wherein if the individual performs the target action, performance of the target action does not compromise the remote computing device or personal information of the individual; causing the simulated phishing email to be transmitted over a communications network to the remote computing device, the simulated phishing email comprising an identifying header, wherein the identifying header is used by the network device for identifying the simulated phishing email as a non-malicious simulated phishing email sent by the network device; providing a plug-in for an email client at the remote computing device, the plug-in configurable for executing computer instructions for: receiving over the communications network, by the network device from the remote computing device, a notification triggered by the user interface action by the individual that the email delivered in the email account associated with the individual has been identified by the individual as a possible phishing attack; if the identified email is determined to be a known simulated phishing attack based on the comparison of the identifying header to the one or more headers of the identified email, electronically recording data indicating that the email has been identified as a simulated phishing attack; if the identified email is determined not to be a known simulated phishing attack based on the comparison of the identifying header to the one or more headers of the identified email, electronically recording data indicating that the email has been identified as a potential phishing attack; calculating aggregate identifications of simulated phishing attacks and potential phishing attacks based on electronically recorded data comprising at least the identification by the individual of the email as a simulated phishing attack or a potential phishing attack; and causing a graphical display of the aggregate identifications of simulated phishing attacks and potential phishing attacks.