Web resource recognition

1 . A method comprising:

detecting an electronic communication to a user device comprising one or more links that address one or more web resources;

determining that at least one link of the one or more links addresses an unrecognized web resource;

replacing the at least one link with at least one replacement link that directs to a predetermined safe web page encoding a questionnaire, wherein the questionnaire comprises a user interface element usable to select either of a constrained version of the unrecognized web source and an unconstrained version of the unrecognized web source;

receiving, from the user device, a user selection of the constrained version of the unrecognized web source;

after receiving the user selection, generating the constrained version of the unrecognized web resource, wherein the constrained version comprises a read-only image of the unrecognized web source; and

rendering the constrained version to the user device via a user interface.

2 . The method of claim 1 , wherein determining that the at least one link of the one or more links addresses the unrecognized web resource comprises:

extracting one or more domains from the one or more links; and

comparing the one or more domains to a list of recognized domains.

3 . The method of claim 2 , wherein comparing the one or more domains to the list of recognized domains comprises comparing the one or more domains to a list of recognized domains generated from browser data associated with the user device.

4 . The method of claim 1 , further comprising:

receiving input from the user device selecting the at least one replacement link;

rendering the predetermined safe web page in response to reception of the input, the questionnaire comprising one or more prompts for additional input; and

receiving the additional input via the one or more prompts.

5 . The method of claim 4 , wherein:

receiving the additional input comprises receiving input requesting administrative review of the unrecognized web resource; and

initiating the administrative review in response to reception of the additional input.

6 . The method of claim 1 , further comprising:

receiving input from an administrator specifying a policy to control access to the constrained version; and

controlling access to the constrained version based on the policy.

7 . The method of claim 1 , wherein generating the constrained version comprises generating a control-disabled graphical representation of the unrecognized web resource.

8 . The method of claim 1 , wherein detecting the electronic communication comprises detecting one or more of an email or an instant message.

9 . The method of claim 1 , wherein detecting the electronic communication comprises detecting the electronic communication at a server.

10 . The method of claim 1 , wherein generating the constrained version of the unrecognized web resource comprises:

configuring a proxy for a web browser of the user device to load the unrecognized web resource.

11 . A computer system comprising:

at least one memory;

at least one user interface on a user device; and

at least one processor coupled with the at least one memory and the at least one user interface and configured to:

detect an electronic communication to user device comprising one or more links that address one or more web resources;

determine whether each link of the one or more links addresses a recognized web resource or an unrecognized web resource;

replace each link that addresses the unrecognized web resource with a replacement link that directs to a predetermined safe web page encoding a questionnaire, wherein the questionnaire comprises a user interface element usable to select either of a constrained version of the unrecognized web source and an unconstrained version of the unrecognized web source;

receive, from the user device, a user selection of the constrained version of the unrecognized web source;

after receiving the user selection, generate the constrained version of the unrecognized web resource, wherein the constrained version comprises a read-only image of the unrecognized web source; and

render the electronic communication to the user device via a user interface.

12 . The computer system of claim 11 , wherein to determine comprises to:

extract one or more domains from the one or more links; and

compare the one or more domains to a list of recognized domains associated with the user device.

13 . The computer system of claim 11 , wherein:

the electronic communication comprises at least one replacement link; and

the at least one processor is further configured to:

receive input from the user device that selects the replacement link, render the predetermined safe web page in response to reception of the input, the questionnaire comprising one or more prompts for additional input, and

receive the additional input via the one or more prompts.

14 . The computer system of claim 13 , wherein:

the additional input comprises input that requests administrative review of at least one unrecognized web resource specified in the at least one replacement link; and

the at least one processor is configured to initiate the administrative review in response to reception of the additional input.

15 . The computer system of claim 11 , wherein the at least one processor is further configured to generate the constrained version of the unrecognized web resource by:

disabling all controls in the unrecognized web resource.

16 . A non-transitory computer readable medium storing processor executable instructions to recognize web resources, the instructions comprising instructions to:

detect an electronic communication to a user device comprising one or more links that address one or more web resources;

determine whether each link of the one or more links addresses a recognized web resource or an unrecognized web resource;

replace each link that addresses the unrecognized web resource with a replacement link that directs to a predetermined safe web page encoding a questionnaire, wherein the questionnaire comprises a user interface element usable to select either of a constrained version of the unrecognized web source and an unconstrained version of the unrecognized web source;

receive, from the user device, a user selection of the constrained version of the unrecognized web source;

after receiving the user selection, generate the constrained version of the unrecognized web resource, wherein the constrained version comprises a read-only image of the unrecognized web source; and

render the electronic communication to the user device via a user interface.

17 . The non-transitory computer readable medium of claim 16 , wherein the instructions to determine comprise instructions to:

extract one or more domains from the one or more links; and

compare the one or more domains to a list of recognized domains associated with the user device.

18 . The non-transitory computer readable medium of claim 16 , wherein:

the electronic communication comprises at least one replacement link; and

the instructions comprise instructions to:

receive input from the user device that selects the replacement link, render the predetermined safe web page in response to reception of the input, the questionnaire comprising one or more prompts for additional input, and

receive the additional input via the one or more prompts.

19 . The non-transitory computer readable medium of claim 18 , wherein:

the additional input comprises input that requests administrative review of at least one unrecognized web resource specified in the at least one replacement link; and

the instructions comprise instructions to initiate the administrative review in response to reception of the additional input.

20 . The non-transitory computer readable medium of claim 16 , wherein the instructions comprise instructions to:

receive from the user device, a user selection of a type of the constrained version of the unrecognized web resource; and

based on the user selection of the type, generate the constrained version of the unrecognized web resource comprising at least one of:

a control-disabled version that all controls in the unrecognized web resource have been disabled;

a graphical version that is the read-only image of the unrecognized web resource; and

a proxied version that a proxy for a web browser of the user device is configured to load the unrecognized web resource.