SYSTEM AND METHOD FOR DETECTION OF TARGET ATTACKS Russian patent published in 2016 - IPC G06F21/50 G06F12/14 

FIELD: information technology.

SUBSTANCE: invention relates to means of computer security. Method of detecting targeted attacks, which get their information about the resource from the source; detect suspicious attribute in the obtained information for the given resource; collect additional information about the resource, in respect of which a suspicious sign was detected by accessing this resource with computer systems with various characteristics; associate the characteristics of computer systems and the information obtained about the resource for which a suspicious attribute was detected; determine characteristic of computer systems, bringing together a group of computer systems, when accessing each of them to the resource, on which was detected suspicious sign, was repeatedly detected suspicious attitude in respect of the resource; detect a target attack with respect to said group of computer systems, combined characteristic, determined previously.

EFFECT: technical result is in improved security of computer systems.

14 cl, 5 dwg