Patent ID: 7668921
Filing Date: 2010-02-23
Classification: H04L

Abstract:
1. A method for detection of phishing attempts in received electronic mail messages in a networked environment including a plurality of personal computers, and electronic mail server, the method comprising: receiving an incoming electronic mail message, wherein said electronic mail message includes an address; retrieving the source code of said incoming message; retrieving text as displayed to the recipient of said electronic message; retrieving a list of all specified addresses from said retrieved source code; applying visual character normalization to each said specified address to develop all possible address combinations and to form a normalized address list, said visual character normalization comprises the steps of: wherein said visual homonym includes a homographic character that comprises another character, to form a list of possible address cores; removing said specified addresses from said normalized address list to create a revised address list; performing at least one comparison test to determine if each address in said revised address list is a valid address; returning a message to said recipient that said electronic message may be a forgery if a tested address is found to be not valid; performing said comparison tests on another address in said revised address list if said tested address is found to be valid; and informing said recipient that said electronic message is valid and accepted if said tested address is found to be valid.