Richard T Kohn

US Patent:

7543055, Jun 2, 2009

Filed:

Jun 20, 2006

Appl. No.:

11/425229

Inventors:

Richard T. Kohn - Orlando FL, US

Assignee:

Earthlink - Atlanta GA

International Classification:

G06F 15/173

US Classification:

709224, 726 2, 713155

Abstract:

Systems and methods responsive to communicated network threats are disclosed. An example method includes assembling a collection of files, inserting a network traffic monitor that identifies a first domain responsible for communicating a known threat, searching for and classifying files not in the collection of files, and updating the collection of files when the classification indicates that the file not in the collection of files is a network threat. An embodiment of a system includes a network traffic monitor, a crawler, a data store, and an analyzer. The network traffic monitor identifies a first domain responsible for communicating a threat. The crawler traverses the first domain and additional domains linked via the first domain. In addition, the crawler identifies changed files. The data store holds a collection of files associated with known threats and files not associated with threats.