Patent ID: 8997228
Filing Date: 2015-03-31
Classification: G06F,H04L

Abstract:
1. A method for detecting an infected website comprising: receiving, by at least one hardware computer processor, a plurality of redirection reports from a plurality of security agents, wherein each redirection report comprises information about a redirection from a first website to a malicious website and information about a plurality of website navigation parameters associated with a request for the first website; determining a first value of a website navigation parameter of the plurality of website navigation parameters that at least partially satisfies a condition of a conditional redirection from the first website to the malicious website based on the plurality of redirection reports; determining that the first website is infected with malicious code that causes the conditional redirection based on the plurality of redirection reports, wherein the malicious code causes the conditional redirection from the first website to the malicious website when at least one condition of the conditional redirection is satisfied; and selectively permitting access to the first website infected with the malicious code that causes the conditional redirection when the at least one condition of the conditional redirection is not satisfied.