Patent Document ID: 8307431
Application ID: 12156341

Base Claim:
1. A method comprising: identifying by a network node a particular Internet domain name as a legitimate Internet domain name based on its being tested as safe; determining by the network node, using a first regular expression for identifying the legitimate Internet domain name, whether a domain name of a uniform resource locator associated with network traffic matches a legitimate Internet domain name of a target organization; classifying network traffic containing the uniform resource locator as legitimate if the uniform resource locator's domain name matches the legitimate Internet domain name; adding the domain name of the uniform resource locator associated with network traffic to a set of legitimate Internet domain names; if the uniform resource locator is not classified as legitimate, quantifying by the network node how closely the uniform resource locator matches a second regular expression for identifying an unacceptable uniform resource locator of the target organization, the second regular expression different from the first regular expression; and performing a function when network traffic that is not classified as legitimate matches the second regular expression for identifying an unacceptable uniform resource locator with a matching score greater than a first predetermined threshold, the function comprising delaying the network traffic from reaching its destination and transmitting an indication that the network traffic contains a uniform resource locator which may be an unacceptable uniform resource locator, wherein the particular Internet domain name is tested by the network node as being safe by analyzing a structure of a web page associated with the particular Internet domain name, the structure of the web page analyzed by analyzing a domain that is pointed to by a uniform resource locator embedded in the web page, and wherein the particular Internet domain name comprises a domain name registered to an approved advertising organization designated as approved by a representative of the target organization and an end user.

---

Claim 7:
7. The method of claim 1 further comprising: identifying a particular Internet domain name as a legitimate Internet domain name based on its being historically observed to be safe.