FIELD: computer security.
SUBSTANCE: present invention relates to computer security and namely to systems and methods of detecting network fraud, for example, fraudulent web pages. The systems and methods provide the ability to quickly and efficiently detect fraudulent Internet domains, that is, domains used to host or distribute fraudulent electronic documents such as fraudulent web pages and email messages. In some embodiments, reverse IP analysis is used to select a group of rogue candidates from a group of domains located at the same IP address as a known fraudulent domain. The group of candidates is additionally filtered according to the domain registration data. Online content hosted on each filtered candidate domain is further analyzed to identify truly fraudulent domains. The security module can then deny users access to the content of such domains.
EFFECT: invention ensures computer security.
15 cl, 8 dwg
