Domain Classification And Routing Using Lexical and Semantic Processing

摘要

Domain classification based on lexical and semantic processing of target domains is provided. A target domain name or URL may undergo a lexical analysis to identify language indicating a potential association with malware. In response to a positive identification, the system may identify the domain name as potentially malicious and/or perform additional analysis. A semantic analysis of content associated with the target domain name may be performed. A corpus of information for content associated with malware is provided. The content of the webpage associated with the target domain name may be analyzed and compared to the corpus to identify potential similarity with malicious content. If the content for the target domain name meets a threshold similarity with malicious content from the corpus, the domain name may be flagged as malicious and added to a block list, for example.