Patent ID: 8769673
Filing Date: 2014-07-01
Classification: G06F,H04L

Abstract:
1. A computing device having computer-executable instructions embodied thereon that, when executed, perform a method for identifying potentially harmful, malicious, or unwanted content based upon entity associations, the method comprising: identifying executable content associated with a domain the identified executable content is known to be associated with harmful, malicious, or unwanted content; identifying one or more entities associated with the executable content for classification, wherein identifying the one or more entities for classification comprises: mapping a relationship of the second entity to the first entity on a relational map; utilizing comparative suspicion levels of the first and second entities to prioritize examination, wherein the comparative suspicion levels represent a proximity to the identified executable content, wherein prioritizing examination comprises: monitoring the associated domain for a change in executable content associated therewith; identifying at least one characteristic associated with the change in the executable content based on monitoring the associated domain; and indexing the at least one identifying characteristic associated with the change in the executable content in association with the executable content.