Patent Document ID: 9967273
Application ID: 14739787
Patent Status: 1

Claim One:
1. A method of detecting abusive traffic on a web service, the method comprising: aggregating a set of consumption data, the aggregated set of consumption data including a list of one or more consumption records associated with consumption of digital content via the web service, the one or more consumption records comprising a content owner, a content user, and a date of the consumption; identifying one or more suspicious content owners, wherein the one or more suspicious content owners are owners of digital content accessible via the web service; identifying one or more suspicious content users, wherein the one or more suspicious content users are consumers of digital content of the one or more suspicious content owners via the web service, and wherein identifying the one or more suspicious content owners comprises: generating a list of a plurality of top users of the web service from the aggregated set of consumption data; identifying a plurality of content owners associated with content consumed by the plurality of top users; for each content owner of the plurality of content owners associated with content consumed by the plurality of top users: computing a ratio comparing consumption of content associated with the content owner by the plurality of top users to consumption of content associated with the content owner by all users in the aggregated set of consumption data; determining whether the ratio is above a threshold value; and in response to a positive determination that the ratio is above the threshold value, determining that the content owner is a suspicious content owner; grouping at least one of the one or more suspicious content owners and at least one of the one or more suspicious content users into a group; analyzing the group for determining whether the at least one of the one or more suspicious content owners and the at least one of the one or more suspicious content users constitute an abusive entity; and in response to a positive determination related to analyzing the group, generating a notification including the at least one of the one or more suspicious content owners and the at least one of the one or more suspicious content users.