Patent ID: 9544328
Date: 2017-01-10
CPC Classifications: H04L

Claim:
1. A computer-implemented method comprising: sending a reputation query from a first computer to a second computer over a computer network, the reputation query comprising a network address of a website on the computer network; providing the first computer a first reputation of the website at a first point in time, the first reputation indicating that the website is not a malicious website; storing in a repository the network address and an identifier uniquely identifying the first computer, wherein the identifier comprises a combination of an IP address of the first computer and an IP address of a gateway computer supporting the first computer; determining a second reputation of the website at a second point in time after the first point in time, the second reputation indicating that the website is a malicious website; identifying the first computer as having navigated to the website when the website had the first reputation by consulting the repository; and in response to identifying the first computer as having navigated to the website, providing mitigation to the first computer to address a malicious action that occurred on the first computer due to navigation of the first computer to the website before the second point in time.