Patent ID: 8321934

Claim:
A computer implemented method for detecting malicious websites based on end user data submission statistics, the method comprising the steps of: receiving data from each of a plurality of user computers which has been marked by the user computers as confidential information; aggregating data received from the plurality of user computers; analyzing the aggregated data, comprising: performing adaptive statistical anomaly detection, by applying statistical usage profiling to continuously modify a baseline; measuring confidential information disclosure activity in relation to the baseline; comparing the short-term profile to the long-term profile; and detecting a statistically significant deviation between the two profiles, the deviation indicating a short term increase in submission of confidential information to a website; based on the statistical analysis, detecting anomalous behavior concerning submission of aggregated confidential information received from the plurality of user computers to a website; and responsive to detecting the anomalous behavior concerning submission of confidential information to a website, performing at least one additional step to protect users from submitting confidential information to that website.