FIELD: information technology.
SUBSTANCE: invention relates to means for classifying a web resource. Obtain data associated with a variety of browsers for browser applications. Browsers for browser activity contain information about past browsing activities: the identifier of the web resource associated with the access attempt, the parent process index that initiated this access attempt, and the parameter of the first start. If the first run (i) parameter indicates that the access attempt was made the first time the browser application was launched and (ii) the parent process is not listed in the white list of parent processes, then an analysis is made of the set of past search sessions stored on the search server of the log to determine the historical search parameter that is associated with this web resource. Based on the results of the historical search parameter analysis, this web resource is added to the black list of web resources.
EFFECT: technical result is to ensure the definition of a web resource as malicious.
21 cl, 4 dwg
