Patent Document ID: 10033757
Application ID: 15177555
Patent Flag: 1

Claim One:
1. A method for identifying malicious resources accessible through a network, the method comprising: providing a labeled dataset of malicious identifiers and non-malicious identifiers to a classifier, wherein the labeled dataset includes at least one descriptive feature associated with each of the malicious identifiers and non-malicious identifiers; identifying at least one probabilistic pattern among the at least one descriptive feature; developing, using the classifier, a decision boundary between the malicious identifiers and non-malicious identifiers based on the at least one identified probabilistic pattern; accessing, through a medium interface to a computer-readable medium, an accessed identifier comprising the location of a network accessible resource; extracting, using a configured processor, textual information concerning the accessed identifier accessed by the medium interface; collecting, using the configured processor, metadata information from communications with the network accessible resource associated with the accessed identifier; collecting, using the configured processor, content from communications with the network accessible resource associated with the accessed identifier; and providing the extracted textual information, collected metadata information, and collected content to the classifier as input, and receiving an identification of the accessed identifier as malicious or non-malicious based on a comparison of the provided textual information, metadata information, and collected content with the developed decision boundary.