Patent ID: 9124622
Filing Date: 2015-09-01
Classification: G06Q,H04L

Abstract:
1. A data processing method providing an improvement in computer security, comprising: selecting, from a queue identifying a plurality of web pages, a particular web page to retrieve from one of a plurality of internet sources; causing retrieving a copy of the particular web page from a particular internet source; determining a hierarchical document object model (DOM) tree structure of the particular web page; based upon the hierarchical DOM tree structure of the particular web page and independent of consideration of content of the particular web page, identifying one or more features, of links in the particular web page or files referenced in the particular web page, that indicate one or more security threats; determining a reputation score for the particular web page based on the one or more features that indicate the one or more security threats; determining a specified remediation measure, based upon the reputation score, to remediate a security threat that is identified in the particular web page; providing the specified remediation measure to one or more of a compromised computer, a sensor computer and an enterprise computer.