Patent ID: 9742758
Date: 2017-08-22
CPC Classifications: H04L

Claim:
1. A non-transitory computer-readable medium embodying a program executable in a computing device, wherein, when executed, the program causes the computing device to at least: obtain a request from a client device to establish, via a network, a communication session with a website; establish the communication session with the website, the communication session being established using a digital certificate for the website; generate a validation of the communication session based at least in part upon a comparison of an historical profile for the website and a plurality of observed characteristics of the website detected during the communication session, the historical profile being based at least in part upon at least one previous communication session with the website, the historical profile further being obtained from a peer computing device that is a member of a set of trusted peers, wherein a set of historical characteristics is based on a digital certificate presented by the website, the set comprising at least one of: an issuing certificate authority, a date of issuance or expiration, or a cryptographic hash value computed on a portion of the digital certificate, the set of historical characteristics further being based upon at least one transport layer security (TLS) options associated with the at least one previous communication session, the TLS options comprising at least one of a protocol version, a supported cipher suite, or a renegotiation support parameter, wherein individual ones of the set of historical characteristics are individually weighted based upon significance; in response to the validation indicating a discrepancy between the historical profile for the website and the communication session with the website, determining a collective weight of the discrepancy based upon the individually weighted set of historical characteristics; and initiating an action selected based at least in part upon the collective weight of the discrepancy meeting a threshold.