Patent ID: 9083733
Filing Date: 2015-07-14
Classification: G06F,H04L

Abstract:
1. A method of anti-phishing and domain name protection, comprising: capturing a system call sent to an operating system of a client by an application requesting an access to an Internet resource; extracting a URL included in the captured system call; capturing a response to the system call sent from operating system to the application; determining when the system call's response includes any one of a domain name system (DNS) error code and fake internet protocol (IP) address, wherein the determination of when the system call's response includes a fake IP address includes: sending a DNS resolution request to a DNS with a non-exist domain name; determining when the DNS returns a valid IP address; and when the DNS returns a valid IP address, then the IP address returned by the system call's response is a fake IP address generated by a DNS hijacker; checking the extracted URL against an anti-phishing blacklist to determine when the Internet resource is a malicious website; performing a DNS error correction action when any one of the DNS error code and the fake IP address was detected; and performing an anti-phishing protection action when the internet resource is determined to be a malicious website.