Patent ID: 8683584

Claim:
A system for performing a risk assessment of a website, comprising: a detection engine executing on a computer processor and configured to: emulate presentation of a plurality of web pages of the website, extract content based on emulating presentation of the plurality of web pages, and detect, based on at least one signal associated with malware, a plurality of suspicious elements included in the extracted content; a risk assessment module configured to: classify each of the plurality of suspicious elements into a category of a plurality of categories, each category of the plurality of categories being associated with a different property of the extracted content, generate an individual risk rating for each category in the plurality of categories based on the suspicious elements classified into the category, assign a weight to each of the individual risk ratings generated for the plurality of categories, combine the individual risk ratings based on the weight assigned to each of the individual ratings, and calculate, based on the combined individual risk ratings, an overall risk rating associated with the website; and a reporting engine configured to: provide as output a risk assessment report comprising the overall risk rating.