Online assets continuous monitoring and protection
The present invention relates to a method and system for monitoring webpages for detecting malicious contents. According to a preferred embodiment the method comprises A) providing a plurality of URLs provided by a subscriber, employing a crawler to visit a URL webpage of said plurality of URLs; B) retrieving an object from said URL webpage by said crawler; C) analyzing said object retrieved by said crawler from said URL webpage, and determining whether said object retrieved is malicious or not; and D) alerting the subscriber, when said retrieved object is deemed malicious. According to one embodiment, the method further comprises E) employing a crawler to visit a URL webpage of a following URL of the plurality of URLs, when the determination of step C) is deemed not malicious; and F) returning to step B).
1. A protection system for detecting an inclusion of one or more of subscribers' legitimate domain addresses within publicly published blacklists on the web, the system comprising:
A) a subscribers' list including, for each subscriber, one or more of the subscriber's owned legitimate I.P. addresses, URLs or Domains;
B) a list of URLs of sites' that publicly publish blacklists, each said blacklist includes I.P. addresses, URLs or Domains of malicious sites;
C) a monitoring module that, for each subscriber, is configured to: (i) access a site from said list that publicly publishes a blacklist of malicious domains; (ii) scan the blacklist published by said site to determine whether one or more of the subscriber's legitimate I.P. addresses, URLs or Domains appears within the blacklist; and (iii) alert the subscriber upon determination that one or more of his owned legitimate I.P. addresses, URLs or Domains appears within the scanned blacklist; and, repeat (i)-(iii) for additional sites from said list of sites' that publicly publish blacklists.
2. The system of claim 1 , wherein upon each positive determination, said monitoring module submits a request to the respective site for removal from the blacklist.
3. The system of claim 1 , wherein the alert by the monitoring module to the subscriber further comprises a display model indicative of the computer related asset code appearing in the blacklist.