Patent ID: 11392691

Abstract:
A system of averting phishing and ransomware attacks is disclosed wherein system comprises of a network of computers that exchange information to collaborate in sharing knowledge about the attack so that the other computers on the network are alerted and can successfully thwart similar attacks. This collaborative system relies on the end-point intelligence. That is, the computer that is the recipient entity of a malicious electronic mail message allows a review of the content of the message in a safe and sand-boxed environment, referred to as Safe View, and makes a determination regarding the maliciousness of the message. If indeed this message is determined to be malicious, the message is forwarded to an enterprise system on network that analyzes the message and gleans key metadata from it and distributes this information over the network to all the computer nodes on the network. Thus, the enterprise system saves the extracted metadata and key parameters in its database and instantaneously shares with all the systems on the network that utilize it for future analysis of electronic mail messages received. In this manner the individual nodes become better prepared to preemptively analyze and discard any malicious electronic mail messages that are in fact phishing or ransomware attacks. In addition to sharing the end-point intelligence of any one of the nodes with the rest of the network, the enterprise node may itself generate and share knowledge with all local nodes encapsulating information gathered from third parties regarding any prevalent trends, as well as information about malicious phishing or ransomware exploits as they become known in information security community.