Verifying trustworthiness of redirection targets in a tiered web delivery network
Embodiments for verifying trustworthiness of redirection targets in a tiered delivery computing network by at least a portion of a processor. A degree of trustworthiness for a uniform resource locator (URL) is determined by validating at least one attribute of the URL to establish a reputation score of the URL. The URL is classified, using the reputation score, into one of a plurality of classifications to indicate the degree of trustworthiness.
1. A method, by a processor, for verifying trustworthiness of redirection targets in a tiered delivery computing network using a proxy in a computing network, comprising:
determining a degree of trustworthiness for a uniform resource locator (URL) by validating at least one attribute of the URL to establish a reputation score of the URL, the at least one attribute of the URL subject to a weighted average of a heuristic analysis upon capturing and analyzing in real-time a domain name service (DNS) response wherein heuristics are extracted and analyzed from the DNS response; wherein the heuristics include at least URL time-to-live (TTL) information, contiguous or non-contiguous internet protocol (IP) address information, time zone entropy anomalies, and a DNS fluxiness ratio; and
classifying the URL, using the reputation score, into one of a plurality of classifications to indicate the degree of trustworthiness; wherein one a plurality of redirect operations are performed according to the classification indicating the degree of trustworthiness to mitigate malicious communications.
2. The method of claim 1 , further including decomposing the URL at the proxy to establish a trustworthiness of a fully qualified domain name (FQDN) and a URL path.
3. The method of claim 1 , further including determining a character string related to the URL is classified as benign, malignant, suspicious, or malicious.
4. The method of claim 1 , further including redirecting the URL to a target browser upon the degree of trustworthiness being classified as benign.
5. The method of claim 1 , further including redirecting the URL to a warning page related to a target browser upon the degree of trustworthiness being classified as suspicious.
6. The method of claim 1 , further including redirecting the URL to a warning page related to a target browser upon the degree of trustworthiness being classified as anomalous.
7. The method of claim 1 , further including redirecting the URL to a denied access page related to a target browser upon the degree of trustworthiness being classified as malicious.
8. A system for enforced registry of cookies in a tiered delivery computing network, comprising:
one or more computers with executable instructions that when executed cause the system to:
determine a degree of trustworthiness for a uniform resource locator (URL) by validating at least one attribute of the URL to establish a reputation score of the URL, the at least one attribute of the URL subject to a weighted average of a heuristic analysis upon capturing and analyzing in real-time a domain name service (DNS) response wherein heuristics are extracted and analyzed from the DNS response; wherein the heuristics include at least URL time-to-live (TTL) information, contiguous or non-contiguous internet protocol (IP) address information, time zone entropy anomalies, and a DNS fluxiness ratio; and
classify the URL, using the reputation score, into one of a plurality of classifications to indicate the degree of trustworthiness; wherein one a plurality of redirect operations are performed according to the classification indicating the degree of trustworthiness to mitigate malicious communications.
9. The system of claim 8 , wherein the executable instructions decompose the URL at the proxy to establish a trustworthiness of a fully qualified domain name (FQDN) and a URL path.
10. The system of claim 8 , wherein the executable instructions determine a character string related to the URL is classified as benign, malignant, suspicious, or malicious.
11. The system of claim 8 , wherein the executable instructions redirect the URL to a target browser upon the degree of trustworthiness being classified as benign.
12. The system of claim 8 , wherein the executable instructions redirect the URL to a warning page related to a target browser upon the degree of trustworthiness being classified as suspicious.
13. The system of claim 8 , wherein the executable instructions redirect the URL to a warning page related to a target browser upon the degree of trustworthiness being classified as anomalous.
14. The system of claim 8 , wherein the executable instructions redirect the URL to a denied access page related to a target browser upon the degree of trustworthiness being classified as malicious.
15. A computer program product for, by a processor, verifying trustworthiness of redirection targets in a tiered delivery computing network, the computer program product comprising a non-transitory computer-readable storage medium having computer-readable program code portions stored therein, the computer-readable program code portions comprising:
an executable portion that determines a degree of trustworthiness for a uniform resource locator (URL) by validating at least one attribute of the URL to establish a reputation score of the URL, the at least one attribute of the URL subject to a weighted average of a heuristic analysis upon capturing and analyzing in real-time a domain name service (DNS) response wherein heuristics are extracted and analyzed from the DNS response; wherein the heuristics include at least URL time-to-live (TTL) information, contiguous or non-contiguous internet protocol (IP) address information, time zone entropy anomalies, and a DNS fluxiness ratio; and
an executable portion that classifies the URL, using the reputation score, into one of a plurality of classifications to indicate the degree of trustworthiness; wherein one a plurality of redirect operations are performed according to the classification indicating the degree of trustworthiness to mitigate malicious communications.
16. The computer program product of claim 15 , further including an executable portion that decomposes the URL at the proxy to establish a trustworthiness of a fully qualified domain name (FQDN) and a URL path.
17. The computer program product of claim 15 , further including an executable portion that determines a character string related to the URL is classified as benign, malignant, suspicious, or malicious.
18. The computer program product of claim 15 , further including an executable portion that redirects the URL to a target browser upon the degree of trustworthiness being classified as benign.
19. The computer program product of claim 15 , further including an executable portion that redirects the URL to a warning page related to a target browser upon the degree of trustworthiness being classified as suspicious or redirects the URL to a warning page related to a target browser upon the degree of trustworthiness being classified as anomalous.
20. The computer program product of claim 15 , further including an executable portion that redirects the URL to a denied access page related to a target browser upon the degree of trustworthiness being classified as malicious.