Patent ID: 8583778
Filing Date: 2013-11-12
Classification: G06F

Abstract:
1. A computer-implemented method comprising the steps of: storing a count that indicates how many entries in website registry information have a particular value for a particular characteristic, wherein each entry of the entries in the website registry information includes a value for each of a plurality of characteristics; wherein said particular characteristic is one of registrar, name server, or at least a portion of a name server IP address; identifying a plurality of distinct values for the particular characteristic; for each time period of a plurality of time periods, performing the step of: based on the percentage share value of each distinct value of the plurality of distinct value for each time period of the plurality of time periods, calculating a deviation value for said each distinct value; based on the calculated deviation values, identifying, as suspicious, one or more websites that are associated with the entries that have the particular value for the particular characteristic; wherein the step of storing the count is performed on one or more computing devices.