Patent ID: 9386031
Filing Date: 2016-07-05
CPC Classification: H04L

Claim Text:
1. A method for detection of targeted attacks from a network resource, comprising: receiving, by a hardware processor of a computing device connecting with a plurality of computer systems and devices, data about the network resource, wherein each of the plurality of computer systems and devices has a set of parameters and associated parameter values; detecting a presence of a suspect indicator in respective data received from each of a first group of the plurality of computer systems, the suspect indicator indicating a possibility of an attack from the network resource; detecting an absence of the suspect indicator in respective data received from each of a second group of the plurality of computer systems; determining and setting at least one suspect parameter to a first parameter value in each of the first group of the plurality of computer systems and devices; determining and setting the at least one suspect parameter to a second parameter value in each of the second group of the plurality of computer systems and devices, the second parameter value being different from the first parameter value; and estimating a probability of a targeted attack from the network resource based on the suspect indicator, the at least one suspect parameter, and the first and second parameter values.