Client-side technique for detecting software robots

Details Client-side technique for detecting software robots Client-side technique for detecting software robots

2008-10-29

2011-11-08

Chai, Longbit (Department: 2431)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

C726S024000, C726S025000, C726S026000, C726S027000, C726S028000, C713S187000, C713S188000, C713S189000, C713S190000, C713S194000

Reexamination Certificate

active

08056132

ABSTRACT:
Software robots (“bots”) may be detected in a client computer using a client-side bot detector. The client-side bot detector may be configured to receive bot event profiles indicating IP (Internet Protocol) addresses involved in malicious online activities perpetrated by bots and time frames when the malicious online activities occurred. The client-side bot detector may determine dynamic IP addresses that have been dynamically assigned to the client computer by consulting a dynamic IP assignment profile of the client computer. The client-side bot detector may compare the bot event profiles against the dynamic IP assignment profile of the client computer to determine if the client computer is infected by a bot.

REFERENCES:
patent: 7093294 (2006-08-01), Ligafelt et al.
patent: 7716340 (2010-05-01), Modrall
Botnet—From Wikipedia, the free encyclopedia, 4 sheets [retrieved on Oct. 15, 2008]. Retrieved from the internet: http://www.en.wikipedia.org/wiki/Botnet.
IP address—From Wikipedia, the free encyclopedia, 6 sheets [retrieved on Oct. 15, 2008]. Retrieved from the internet: http://www.en.wikipedia.org/wiki/IP—address.
Phishing—From Wikipedia, the free encyclopedia, 9 sheets [retrieved on Oct. 16, 2008]. Retrieved from the internet: http://www.en.wikipedia.org/wiki/Phishing.
Guofei Gu, et al. “BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection”, 15 sheets [retrieved on Oct. 14, 2008]. Retrieved from the internet: http://www.usenix.org/events/sec08/tech/full—papers/gu/gu/—html/index.html.
Aleksander Kolcz, et al. “The Impact of Feature Selection on Signature-Driven Spam Detection”, 8 sheets, 2004 CEAS, Dulles, VA., USA.
Evan Cooke, et al. “The Zombie Roundup: Understanding, Detecting, and Disrupting Botnets”, 2005, pp. 39-44, Proceesings of SRUTI Workshop (Step to Reducing Unwanted Traffic on the Internet).
eWEEK ‘Pump-and-Dump’ Spam Surge Linked to Russian Bot Herders, Nov. 2006, 2 sheets [retrieved on Apr. 4, 2007]. Retrieved from the internet: http://www.eweek.com/print—article2/0,1217,a=194218,00.asp.
eWEEK Spam Trojan Installs Own Anti-Virus Scanner, Oct. 2006, 2 sheets [retrieved on Apr. 4, 2007]. Retrieved from the internet: http://www.eweek.com/print—article2/0,1217,a=191975,00.asp.
Longest common subsequence problem—From Wikipedia, the free encyclopedia, 5 sheets [retrieved on Apr. 5, 2007]. Retrieved from the internet: http://www.en.wikipedia.org/wiki/Longest—common—subsequence—problem.
Jeff Chan-Surbl—Quick Start, Feb. 2007, 5 sheets [retrieved on Apr. 5, 2007]. Retrieved from the internet: http://www.surbl.org/quickstart.html.
The Spamhaus Project, 2 sheets, webpage [online][retrieved on Apr. 5, 2007]. Retrieved from the internet: http://www.spamhaus.org/.
Champskud J. Skrepth, et al. “Robust Hash Functions for Visual Data: An Experimental Comparision”, 2001, 1 sheet, Carinthia Tech Institute, School of Telematics & Network Engineering and Paris-London-University Salzburg, Department of Scientific Computing.

Affiliated with

Also associated with

Rating

Client-side technique for detecting software robots does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Client-side technique for detecting software robots, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Client-side technique for detecting software robots will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4272358