Patent ID: 9407658
Filing Date: 2016-08-02
CPC Classification: G06F,H04L

Claim Text:
1. A method for determining modified web pages, the method comprising: extracting, by a hardware processor, a plurality of malware trigger code fragments from at least one configuration file of a malicious software; creating, by the hardware processor, a verification web page by adding the plurality of malware trigger code fragments into a template page; storing, in a database, data relating to an initial state of the verification web page; opening the verification web page and identifying data relating to an opened state of the verification web page; comparing, by the hardware processor, the data relating to the initial state and the data relating to the opened state of the verification web page; and based on detected differences between the data relating to the initial state and the data relating to the opened state of the verification web page, identifying at least one modified code fragment of the verification web page.