IP Library Granted Patent US 12,282,863
Granted Patent B2
US 12,282,863 · App. 17/171,087 · Granted Apr 22, 2025

Method and system of user identification by a sequence of opened user interface windows

Inventor: Pavel Vladimirovich Slipenchuk (Moscow, RU)
Assignee: F.A.C.C.T. ANTIFRAUD LLC
G06N5/04G06F21/31G06N20/00
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,282,863
App. No.
17/171,087
Granted
Apr 22, 2025
Kind
B2
Abstract

A method and a system for user identification of a user in a computer system are provided. The method comprising: obtaining a user identifier associated with the user; assigning a respective window identifier to each user interface window opened by the user on the computing device; for a given working session of a pre-determined number of working sessions: storing a sequence of user interface windows opened by the user; identify, within user interface windows opened over the pre-determined number of working sessions, at least one pattern including a pre-determined number of repetitive sequences of user interface windows; generating a set of parameters characterizing a time elapsed between a transition from a first user interface window to an other user interface window within the at least one pattern; using the set of parameters associated with the at least one pattern and the user identifier to train at least one classifier.

Claims (57)

1. A method of user identification of a user of a computing device in a computer system, the computing device being associated with the computer system, the method comprising:

obtaining a user identifier associated with the user in the computer system;

assigning a respective window identifier to each user interface window opened by the user on the computing device;

during a pre-determined number of working sessions of the user on the computing device, for a given working session of the pre-determined number of working sessions: storing a sequence of user interface windows opened by the user, the storing including, for a given user interface window of the sequence of user interface windows:

storing a respective window identifier of the given user interface window and a respective timestamp indicative of an opening time of the given user interface window;

identifying, within user interface windows opened over the pre-determined number of working sessions, at least one pattern including a pre-determined number of repetitive sequences of user interface windows opened by the user over the pre-determined number of working sessions, the identifying comprising:

receiving a pre-determined pattern length representative of a number of repetitive sequences of user interface windows in a given pattern;

identifying, over the pre-determined number of working sessions, the given pattern having the pre-determined pattern length;

determining whether a frequency of occurrence of the given pattern in the pre-determined number of working sessions is no greater than a predetermined frequency threshold;

in response to the frequency of occurrence of the given pattern being no greater than the predetermined frequency threshold, including the given pattern in the at least one pattern;

in response to the frequency of occurrence of the given pattern being greater than the predetermined frequency threshold:

increasing the pre-determined pattern length for the given pattern, thereby determining another pattern; and

determining whether the frequency of occurrence of the other pattern in the pre-determined number of working sessions is no greater than the predetermined frequency threshold;

generating a set of parameters characterizing a time elapsed between a transition from a first user interface window to another user interface window within the given one pattern;

using the set of parameters associated with the at least one pattern and the user identifier to train at least one classifier to identify the user by an in-use sequence of user interface windows opened therein.

2. The method of claim 1 , further comprising using the at least one classifier to identify the user in the computer system during an in-use session, the using comprising:

receiving data of the in-use sequence of user interface windows including in-use user interface windows having been opened during the in-use session, wherein:

each one of the in-use user interface windows is associated with a respective timestamp indicative of a time of opening thereof;

applying the at least one classifier to the in-use sequence of the user interface windows to determine a likelihood parameter indicative of each of the in-use user interface windows having been opened by the user;

in response to the likelihood parameter being lower than a pre-determined likelihood threshold, executing one or more pre-determined actions.

3. The method of claim 1 , wherein the given user interface window is a web page.

4. The method of claim 1 , wherein the at least one pattern has been selected as meeting pre-determined criteria.

5. The method of claim 1 , further comprising assigning a weight value to the at least one pattern indicative of an effect of the at least one pattern on a final decision of the at least one classifier.

6. The method of claim 1 , wherein the set of parameters further includes an averaged time elapsed between transitions from the first user interface window to the other user interface window over the pre-determined number of working sessions.

7. The method of claim 6 , wherein the set of parameters further includes a variance value of time intervals elapsed between the transitions from the first user interface window to the other user interface window over the pre-determined number of working sessions.

8. The method of claim 6 , wherein the set of parameters further includes a frequency of occurrence of the at least one pattern in the pre-determined number of working sessions of the user.

9. The method of claim 8 , wherein a greater value of the frequency of occurrence has a greater effect on a final decision of the at least one classifier.

10. The method of claim 1 , wherein training the at least one classifier is executed by applying one or more machine learning techniques.

11. The method of claim 1 , wherein the at least one classifier comprises at least one of a probabilistic graphical model and a Support Vector Machine (SVM) classifier.

12. A system for user identification of a user, the system including a computing device including:

at least one processor;

at least one non-transitory computer-readable medium comprising instructions storing executable instructions, which, when executed by the at least one processor, cause the system:

obtain a user identifier associated with the user in the computer system;

assign a respective window identifier to each user interface window opened by the user on the computing device;

during a pre-determined number of working sessions of the user on the computing device, for a given working session of the pre-determined number of working sessions: store a sequence of user interface windows opened by the user including, for a given user interface window of the sequence of user interface windows:

a respective window identifier of the given user interface window and a respective timestamp indicative of an opening time of the given user interface window;

identify, within user interface windows opened over the pre-determined number of working sessions, at least one pattern including a pre-determined number of repetitive sequences of user interface windows opened by the user over the pre-determined number of working sessions, by:

receiving a pre-determined pattern length representative of a number of repetitive sequences of user interface windows in a given pattern;

identifying, over the pre-determined number of working sessions, the given pattern having the pre-determined pattern length;

determining whether a frequency of occurrence of the given pattern in the pre-determined number of working sessions is no greater than a predetermined frequency threshold;

in response to the frequency of occurrence of the given pattern being no greater than the predetermined frequency threshold, including the given pattern in the at least one pattern;

in response to the frequency of occurrence of the given pattern being greater than the predetermined frequency threshold:

increasing the pre-determined pattern length for the given pattern, thereby determining another pattern; and

determining whether the frequency of occurrence of the other pattern in the pre-determined number of working sessions is no greater than the predetermined frequency threshold;

generate a set of parameters characterizing a time elapsed between a transition from a first user interface window to another user interface window within the at least one pattern;

use the set of parameters associated with the at least one pattern and the user identifier to train at least one classifier to identify the user by an in-use sequence of user interface windows opened therein.

13. The system of claim 12 , wherein the executable instructions further cause the system to use the at least one classifier to identify the user in the computer system during an in-use session, by executing:

receiving data of the in-use sequence of user interface windows including in-use user interface windows having been opened during the in-use session, wherein:

each one of the in-use user interface windows is associated with a respective timestamp indicative of a time of opening thereof;

applying the at least one classifier to the in-use sequence of the user interface windows to determine a likelihood parameter indicative of each of the in-use user interface windows having been opened by the user;

in response to the likelihood parameter being lower than a pre-determined likelihood threshold, executing one or more pre-determined actions.

14. The system of claim 12 , wherein the given user interface window is a web page.

15. The system of claim 12 , wherein the at least one pattern has been selected as meeting pre-determined criteria.

16. The system of claim 12 , wherein the computing device is an integral part of a remote banking service system.

17. The system of claim 12 , wherein the computing device is an integral part of a website including a user authorization feature.

18. The system of claim 12 , wherein the computing device is an integral part of a multiplayer computer game including a user authorization feature.

19. The system of claim 12 , wherein the computing device is an integral part of a software and hardware system for collaborative work including a user authorization feature.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 17, 2025
From: F.A.C.C.T. ANTIFRAUD LLC
To: GROUP-IB GLOBAL PRIVATE LIMITED
Reel/Frame 071438/0815 →
CHANGE OF NAME Recorded Jul 19, 2024
From: GROUP IB, LTD
To: F.A.C.C.T. ANTIFRAUD LLC
Reel/Frame 068462/0907 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 11, 2021
From: SLIPENCHUK, PAVEL VLADIMIROVICH
To: GROUP IB, LTD
Reel/Frame 055736/0661 →
Continuity (2)
Continuation PCTRU2019000232 · Apr 10, 2019
Related Publication 20210182710A1 · Jun 17, 2021
References Cited (291)
US 7225343B1 · Honig et al. · 2007 [cited by applicant]
US 7496628B2 · Arnold et al. · 2009 [cited by applicant]
US 7631362B2 · Ramsey · 2009 [cited by applicant]
US 7712136B2 · Sprosts et al. · 2010 [cited by applicant]
US 7730040B2 · Reasor et al. · 2010 [cited by applicant]
US 7865953B1 · Hsieh et al. · 2011 [cited by applicant]
US 7958555B1 · Chen et al. · 2011 [cited by applicant]
US 7984500B1 · Khanna et al. · 2011 [cited by applicant]
US 8132250B2 · Judge et al. · 2012 [cited by applicant]
US 8151341B1 · Gudov · 2012 [cited by applicant]
US 8255532B2 · Smith-Mickelson et al. · 2012 [cited by applicant]
US 8260914B1 · Ranjan · 2012 [cited by applicant]
US 8285830B1 · Stout et al. · 2012 [cited by applicant]
US 8402543B1 · Ranjan et al. · 2013 [cited by applicant]
US 8448245B2 · Banerjee et al. · 2013 [cited by applicant]
US 8532382B1 · Ioffe · 2013 [cited by applicant]
US 8539582B1 · Aziz et al. · 2013 [cited by applicant]
US 8555388B1 · Wang et al. · 2013 [cited by applicant]
US 8561177B1 · Aziz et al. · 2013 [cited by applicant]
US 8600993B1 · Gupta et al. · 2013 [cited by applicant]
US 8606725B1 · Agichtein et al. · 2013 [cited by applicant]
US 8612463B2 · Brdiczka et al. · 2013 [cited by applicant]
US 8625033B1 · Marwood et al. · 2014 [cited by applicant]
US 8635696B1 · Aziz · 2014 [cited by applicant]
US 8650080B2 · O'Connell et al. · 2014 [cited by applicant]
US 8660296B1 · Ioffe · 2014 [cited by applicant]
US 8677472B1 · Dotan et al. · 2014 [cited by applicant]
US 8776229B1 · Aziz · 2014 [cited by applicant]
US 8850571B2 · Staniford et al. · 2014 [cited by applicant]
US 8856937B1 · Wüest et al. · 2014 [cited by applicant]
US 8972412B1 · Christian et al. · 2015 [cited by applicant]
US 8984640B1 · Emigh et al. · 2015 [cited by applicant]
US 9026840B1 · Kim · 2015 [cited by applicant]
US 9060018B1 · Yu et al. · 2015 [cited by applicant]
US 9185095B1 · Moritz et al. · 2015 [cited by applicant]
US 9210111B2 · Chasin et al. · 2015 [cited by applicant]
US 9215239B1 · Wang et al. · 2015 [cited by applicant]
US 9253208B1 · Koshelev · 2016 [cited by applicant]
US 9330258B1 · Satish et al. · 2016 [cited by applicant]
US 9338181B1 · Burns et al. · 2016 [cited by applicant]
US 9357469B2 · Smith et al. · 2016 [cited by applicant]
US 9456000B1 · Spiro et al. · 2016 [cited by applicant]
US 9590986B2 · Zizi et al. · 2017 [cited by applicant]
US 9654593B2 · Garg et al. · 2017 [cited by applicant]
US 9723344B1 · Granström et al. · 2017 [cited by applicant]
US 9736178B1 · Ashley · 2017 [cited by applicant]
US 9917852B1 · Xu et al. · 2018 [cited by applicant]
US 9934376B1 · Ismael · 2018 [cited by applicant]
US 10864444B1 · Rao · 2020 [cited by examiner]
US 20020112048A1 · Gruyer et al. · 2002 [cited by applicant]
US 20020161862A1 · Horvitz · 2002 [cited by applicant]
US 20030009696A1 · Bunker et al. · 2003 [cited by applicant]
US 20060074858A1 · Etzold et al. · 2006 [cited by applicant]
US 20060107321A1 · Tzadikario · 2006 [cited by applicant]
US 20060224898A1 · Ahmed · 2006 [cited by applicant]
US 20060253582A1 · Dixon et al. · 2006 [cited by applicant]
US 20070019543A1 · Wei et al. · 2007 [cited by applicant]
US 20070101155A1 · Hoghaug et al. · 2007 [cited by applicant]
US 20070239999A1 · Honig et al. · 2007 [cited by applicant]
US 20080222712A1 · O'Connell et al. · 2008 [cited by applicant]
US 20090138342A1 · Otto et al. · 2009 [cited by applicant]
US 20090281852A1 · Abhari et al. · 2009 [cited by applicant]
US 20090292925A1 · Meisel · 2009 [cited by applicant]
US 20100011124A1 · Wei et al. · 2010 [cited by applicant]
US 20100037314A1 · Perdisci et al. · 2010 [cited by applicant]
US 20100076857A1 · Deo et al. · 2010 [cited by applicant]
US 20100115620A1 · Alme · 2010 [cited by applicant]
US 20100115621A1 · Staniford et al. · 2010 [cited by applicant]
US 20100191737A1 · Friedman et al. · 2010 [cited by applicant]
US 20100205665A1 · Komili et al. · 2010 [cited by applicant]
US 20100235918A1 · Mizrahi et al. · 2010 [cited by applicant]
US 20110222787A1 · Thiemert et al. · 2011 [cited by applicant]
US 20120030293A1 · Bobotek · 2012 [cited by applicant]
US 20120079596A1 · Thomas et al. · 2012 [cited by applicant]
US 20120087583A1 · Yang et al. · 2012 [cited by applicant]
US 20120158626A1 · Zhu et al. · 2012 [cited by applicant]
US 20120233656A1 · Rieschick et al. · 2012 [cited by applicant]
US 20120291125A1 · Maria · 2012 [cited by applicant]
US 20120324359A1 · Lee · 2012 [cited by examiner]
US 20130086677A1 · Ma et al. · 2013 [cited by applicant]
US 20130103666A1 · Sandberg et al. · 2013 [cited by applicant]
US 20130111591A1 · Topan et al. · 2013 [cited by applicant]
US 20130117848A1 · Golshan et al. · 2013 [cited by applicant]
US 20130191364A1 · Kamel et al. · 2013 [cited by applicant]
US 20130263264A1 · Klein et al. · 2013 [cited by applicant]
US 20130297619A1 · Chandrasekaran et al. · 2013 [cited by applicant]
US 20130340080A1 · Gostev et al. · 2013 [cited by applicant]
US 20130343616A1 · Forero et al. · 2013 [cited by applicant]
US 20140033307A1 · Schmidtler · 2014 [cited by applicant]
US 20140058854A1 · Ranganath et al. · 2014 [cited by applicant]
US 20140082730A1 · Vashist et al. · 2014 [cited by applicant]
US 20140173287A1 · Mizunuma · 2014 [cited by applicant]
US 20140310811A1 · Hentunen · 2014 [cited by applicant]
US 20150007250A1 · Dicato, Jr. et al. · 2015 [cited by applicant]
US 20150049547A1 · Kim · 2015 [cited by applicant]
US 20150067839A1 · Wardman et al. · 2015 [cited by applicant]
US 20150163242A1 · Laidlaw et al. · 2015 [cited by applicant]
US 20150169854A1 · Chang et al. · 2015 [cited by applicant]
US 20150170312A1 · Mehta et al. · 2015 [cited by applicant]
US 20150200963A1 · Geng et al. · 2015 [cited by applicant]
US 20150220735A1 · Paithane et al. · 2015 [cited by applicant]
US 20150295945A1 · Canzanese et al. · 2015 [cited by applicant]
US 20150310196A1 · Turgeman et al. · 2015 [cited by applicant]
US 20150363791A1 · Raz et al. · 2015 [cited by applicant]
US 20150381654A1 · Wang et al. · 2015 [cited by applicant]
US 20160036837A1 · Jain et al. · 2016 [cited by applicant]
US 20160036838A1 · Jain et al. · 2016 [cited by applicant]
US 20160044054A1 · Stiansen et al. · 2016 [cited by applicant]
US 20160055490A1 · Keren et al. · 2016 [cited by applicant]
US 20160065595A1 · Kim et al. · 2016 [cited by applicant]
US 20160112445A1 · Abramowitz · 2016 [cited by applicant]
US 20160127907A1 · Baxley et al. · 2016 [cited by applicant]
US 20160149943A1 · Kaloroumakis et al. · 2016 [cited by applicant]
US 20160171197A1 · Song et al. · 2016 [cited by applicant]
US 20160191243A1 · Manning · 2016 [cited by applicant]
US 20160205122A1 · Bassett · 2016 [cited by applicant]
US 20160205123A1 · Almurayh et al. · 2016 [cited by applicant]
US 20160226894A1 · Lee et al. · 2016 [cited by applicant]
US 20160253679A1 · Venkatraman et al. · 2016 [cited by applicant]
US 20160261628A1 · Doron et al. · 2016 [cited by applicant]
US 20160267179A1 · Mei et al. · 2016 [cited by applicant]
US 20160285907A1 · Nguyen et al. · 2016 [cited by applicant]
US 20160306974A1 · Turgeman et al. · 2016 [cited by applicant]
US 20160307201A1 · Turgeman et al. · 2016 [cited by applicant]
US 20160359679A1 · Parandehgheibi et al. · 2016 [cited by applicant]
US 20170032250A1 · Chang · 2017 [cited by applicant]
US 20170034211A1 · Buergi et al. · 2017 [cited by applicant]
US 20170111377A1 · Park et al. · 2017 [cited by applicant]
US 20170134401A1 · Medvedovsky et al. · 2017 [cited by applicant]
US 20170140279A1 · Turgeman · 2017 [cited by applicant]
US 20170142144A1 · Weinberger et al. · 2017 [cited by applicant]
US 20170149813A1 · Wright et al. · 2017 [cited by applicant]
US 20170200457A1 · Chai et al. · 2017 [cited by applicant]
US 20170221064A1 · Turgeman · 2017 [cited by examiner]
US 20170230401A1 · Ahmed et al. · 2017 [cited by applicant]
US 20170244735A1 · Visbal et al. · 2017 [cited by applicant]
US 20170250972A1 · Ronda et al. · 2017 [cited by applicant]
US 20170272471A1 · Veeramachaneni et al. · 2017 [cited by applicant]
US 20170279818A1 · Milazzo et al. · 2017 [cited by applicant]
US 20170286544A1 · Hunt et al. · 2017 [cited by applicant]
US 20170289187A1 · Noel et al. · 2017 [cited by applicant]
US 20170295157A1 · Chavez et al. · 2017 [cited by applicant]
US 20170295187A1 · Havelka et al. · 2017 [cited by applicant]
US 20170324738A1 · Hari et al. · 2017 [cited by applicant]
US 20170346839A1 · Peppe et al. · 2017 [cited by applicant]
US 20180012021A1 · Volkov · 2018 [cited by applicant]
US 20180012144A1 · Ding et al. · 2018 [cited by applicant]
US 20180034779A1 · Ahuja et al. · 2018 [cited by applicant]
US 20180063190A1 · Wright et al. · 2018 [cited by applicant]
US 20180096153A1 · Dewitte et al. · 2018 [cited by applicant]
US 20180115573A1 · Kuo et al. · 2018 [cited by applicant]
US 20180268464A1 · Li · 2018 [cited by applicant]
US 20180307832A1 · Ijiro et al. · 2018 [cited by applicant]
US 20180309787A1 · Evron et al. · 2018 [cited by applicant]
US 20180322287A1 · Zhao et al. · 2018 [cited by applicant]
US 20190089737A1 · Shayevitz et al. · 2019 [cited by applicant]
US 20190207973A1 · Peng · 2019 [cited by applicant]
US 20190253443A1 · Vasudevan · 2019 [cited by examiner]
US 20190373005A1 · Bassett · 2019 [cited by applicant]
US 20200126100A1 · Goyal · 2020 [cited by examiner]
US 20200134702A1 · Li · 2020 [cited by applicant]
US 20200244639A1 · Arif Khan et al. · 2020 [cited by applicant]
CA 2606326A1 · 2006 [cited by applicant]
CN 103491205A · 2014 [cited by applicant]
CN 104504307A · 2015 [cited by applicant]
CN 105429956A · 2016 [cited by applicant]
CN 105897714A · 2016 [cited by applicant]
CN 106131016A · 2016 [cited by applicant]
CN 106202482A · 2016 [cited by applicant]
CN 106355450A · 2017 [cited by applicant]
CN 106506435A · 2017 [cited by applicant]
CN 106713312A · 2017 [cited by applicant]
CN 107392456A · 2017 [cited by applicant]
EP 1160646A2 · 2001 [cited by applicant]
EP 2410452B1 · 2016 [cited by applicant]
EP 2477136B1 · 2018 [cited by applicant]
GB 2437100A · 2007 [cited by applicant]
GB 2470579A · 2010 [cited by applicant]
GB 2493514A · 2013 [cited by applicant]
KR 1020070049514A · 2007 [cited by applicant]
KR 20090022682A · 2009 [cited by applicant]
KR 100923179B1 · 2009 [cited by applicant]
KR 101514984B1 · 2015 [cited by applicant]
KR 20190018197A · 2019 [cited by applicant]
RU 2333532C2 · 2008 [cited by applicant]
RU 2382400C2 · 2010 [cited by applicant]
RU 107616U1 · 2011 [cited by applicant]
RU 2446459C1 · 2012 [cited by applicant]
RU 129279U1 · 2013 [cited by applicant]
RU 2487406C1 · 2013 [cited by applicant]
RU 2488880C1 · 2013 [cited by applicant]
RU 2495486C1 · 2013 [cited by applicant]
RU 2522019C1 · 2014 [cited by applicant]
RU 2523114C2 · 2014 [cited by applicant]
RU 2530210C2 · 2014 [cited by applicant]
RU 2536664C2 · 2014 [cited by applicant]
RU 2538292C1 · 2015 [cited by applicant]
RU 2543564C1 · 2015 [cited by applicant]
RU 2566329C2 · 2015 [cited by applicant]
RU 2571594C2 · 2015 [cited by applicant]
RU 2589310C2 · 2016 [cited by applicant]
RU 164629U1 · 2016 [cited by applicant]
RU 2607231C2 · 2017 [cited by applicant]
RU 2610586C2 · 2017 [cited by applicant]
RU 2613535C1 · 2017 [cited by applicant]
RU 2622870C2 · 2017 [cited by applicant]
RU 172497U1 · 2017 [cited by applicant]
RU 2625050C1 · 2017 [cited by applicant]
RU 2628192C2 · 2017 [cited by applicant]
RU 2636702C1 · 2017 [cited by applicant]
RU 2649793C2 · 2018 [cited by applicant]
RU 2670030C2 · 2018 [cited by applicant]
RU 2670906C9 · 2018 [cited by applicant]
RU 2681699C1 · 2019 [cited by applicant]
WO 0245380A2 · 2002 [cited by applicant]
WO 2009026564A1 · 2009 [cited by applicant]
WO 2011045424A1 · 2011 [cited by applicant]
WO 2011039371A1 · 2011 [cited by applicant]
WO 2012015171A2 · 2012 [cited by applicant]
WO 2017070600A1 · 2017 [cited by applicant]
WO 2019010182A1 · 2019 [cited by applicant]
WO 2019035491A1 · 2019 [cited by applicant]
Notice of Allowance with regard to the U.S. Appl. No. 17/171,078 mailed Jan. 22, 2024. [cited by applicant]
Search Report with regard to RU Patent Application No. 2019107535 completed Dec. 13, 2022. [cited by applicant]
English Description and Claims for RU2333532 retrieved on Espacenet on Dec. 28, 2022. [cited by applicant]
English Abstract for RU172497 retrieved on Espacenet on Dec. 28, 2022. [cited by applicant]
International Search Report and Written Opinion with regard to the counterpart Patent Application No. PCT/RU2019/000126 mailed Nov. 28, 2019. [cited by applicant]
English Abstract for KR100923179 retrieved on Espacenet on Dec. 3, 2020. [cited by applicant]
English Abstract for KR20090022682 retrieved on Espacenet on Dec. 3, 2020. [cited by applicant]
English Abstract for KR20190018197 retrieved on Espacenet on Dec. 3, 2020. [cited by applicant]
Wikipedia, “Keystroke dynamics”, https://en.wikipedia.org/wiki/Keystroke_dynamics, accessed on Jan. 4, 2021, pdf 3 pages. [cited by applicant]
Wikipedia, “Feature extraction”, https://en.wikipedia.org/wiki/Feature_extraction, accessed on Jan. 4, 2021, pdf 7 pages. [cited by applicant]
Wikipedia, “Scancode”, ru.wikipedia.org/w/index.php?title=%D0%A1%D0%BA%D0%B0%D0%BD-%D0%BA%D0%BE%D0%B4&oldid=98124315, accessed on Feb. 8, 2021, pdf 9 pages. [cited by applicant]
International Search Report with regard to the Patent Application No. PCT/RU2019/000169 mailed Dec. 5, 2019. [cited by applicant]
Office Action with regard to the counterpart U.S. Appl. No. 16/194,578 mailed Feb. 18, 2022. [cited by applicant]
Brownlee, Jason “How To Implement The Decision Tree Algorithm From Scratch In Python” (Year: 2016). [cited by applicant]
English Abstract of RU107616 retrieved on Espacenet on Jul. 3, 2017. [cited by applicant]
European Search Report with regard to EP17180099 completed on Nov. 28, 2017. [cited by applicant]
European Search Report with regard to EP17191900 completed on Jan. 11, 2018. [cited by applicant]
Yoshioka et al., “Sandbox Analysis with Controlled Internet Connection for Observing Temporal Changes of Malware Behavior”, https://www.researchgate.net/publication/254198606, 15 pages. [cited by applicant]
Yoshioka et al., “Multi -Pass Malware Sandbox Analysis with Controlled Internet Connection”, IEICE Transactions On Fundamentals of Electronics, Communications and Computer Sciences, Engineering Sciences Society, Tokyo, … [cited by applicant]
Wikipedia, “Blockchain”, https://en.wikipedia.org/wiki/Blockchain, pdf document, 18 pages. [cited by applicant]
Search Report with regard to the counterpart RU Patent Application No. 2018101764 completed Jun. 29, 2018. [cited by applicant]
Search Report with regard to the counterpart RU Patent Application No. 2018101761 completed Jun. 20, 2018. [cited by applicant]
International Search Report with regard to the counterpart Patent Application No. PCT/RU2016/000526 mailed Jun. 1, 2017. [cited by applicant]
Search Report with regard to the counterpart RU Patent Application No. 2018101760 completed Jun. 22, 2018. [cited by applicant]
Search Report with regard to the counterpart RU Patent Application No. 2018101759 completed Sep. 7, 2018. [cited by applicant]
English Abstract of RU129279 retrieved on Espacenet on Sep. 11, 2017. [cited by applicant]
English Abstract of RU164629 retrieved on Espacenet on Sep. 11, 2017. [cited by applicant]
English Abstract of RU2538292 retrieved on Espacenet on Sep. 11, 2017. [cited by applicant]
Prakash et al., “PhishNet: Predictive Blacklisting to Detect Phishing Attacks”, INFOCOM, 2010 Proceedings IEEE, USA, 2010, ISBN: 978-1-4244-5836-3, doc. 22 pages. [cited by applicant]
Search Report with regard to the counterpart Patent Application No. RU2018105377 completed Oct. 15, 2018. [cited by applicant]
Search Report with regard to the counterpart RU Patent Application No. 2018101763 completed Jan. 11, 2019. [cited by applicant]
Search Report with regard to the counterpart RU Patent Application No. 2016137336 completed Jun. 6, 2017. [cited by applicant]
English Abstract of RU2522019 retrieved on Espacenet on Jan. 25, 2019. [cited by applicant]
Search Report with regard to the counterpart RU Patent Application No. 2017140501 completed Jul. 11, 2018. [cited by applicant]
European Search Report with regard to the counterpart EP Patent Application No. EP17211131 completed Apr. 12, 2018. [cited by applicant]
European Search Report with regard to the counterpart EP Patent Application No. EP17210904 completed May 16, 2018. [cited by applicant]
English Translation of CN106713312, © Questel—FAMPAT, Jul. 17, 201. [cited by applicant]
English Translation of CN105897714, © Questel—FAMPAT, Jul. 17, 2019. [cited by applicant]
English Translation of CN106506435, © Questel—FAMPAT, Jul. 26, 2019. [cited by applicant]
English Translation of CN107392456, © Questel—FAMPAT, Jul. 29, 2019. [cited by applicant]
English Translation of CN103491205, © Questel—FAMPAT, Jul. 29, 2019. [cited by applicant]
English Translation of CN106131016, © Questel—FAMPAT, Jul. 17, 2019. [cited by applicant]
Invitation to Respond to Written Opinion received Aug. 5, 2019 with regard to the counterpart SG Patent Application No. 10201900339Q. [cited by applicant]
Invitation to Respond to Written Opinion received Aug. 5, 2019 with regard to the counterpart SG Patent Application No. 10201901079U. [cited by applicant]
Invitation to Respond to Written Opinion received Jul. 31, 2019 with regard to the counterpart SG Patent Application No. 10201900335P. [cited by applicant]
Office Action with regard to the counterpart U.S. Appl. No. 15/707,641 mailed Apr. 25, 2019. [cited by applicant]
Russian Search Report dated Mar. 2, 2023 issued in respect of the counterpart Russian Patent Application No. RU 2019111675. [cited by applicant]
Notice of Allowance with regard to the counterpart U.S. Appl. No. 15/858,013 mailed Jun. 10, 2020. [cited by applicant]
Office Action with regard to the counterpart U.S. Appl. No. 16/270,341 mailed May 27, 2020. [cited by applicant]
Notice of Allowance with regard to the counterpart U.S. Appl. No. 15/858,013 mailed May 8, 2020. [cited by applicant]
Office Action received with regard to the counterpart U.S. Appl. No. 15/858,032 mailed Apr. 6, 2020. [cited by applicant]
Search Report with regard to the counterpart SG Patent Application No. 10201900062S mailed Dec. 5, 2019. [cited by applicant]
Search Report with regard to the counterpart SG Patent Application No. 10201900060Y mailed Dec. 5, 2019. [cited by applicant]
English Abstract for CN105429956 retrieved on Espacenet on Jan. 7, 2020. [cited by applicant]
English Abstract for CN104504307 retrieved on Espacenet on Jan. 7, 2020. [cited by applicant]
Office Action with regard to the counterpart U.S. Appl. No. 15/858,013 mailed Nov. 22, 2019. [cited by applicant]
Notice of Allowance with regard to the counterpart U.S. Appl. No. 15/707,641 mailed Oct. 30, 2019. [cited by applicant]
Whyte, “DNS-based Detection of Scanning Worms in an Enterprise Network”, Aug. 2004, NOSS, pp. 1-17 {Year: 2005)—cited by Examiner in the Notice of Allowance with regard to the counterpart U.S. Appl. No. 15/707,641. [cited by applicant]
Office Action with regard to the counterpart U.S. Appl. No. 16/261,854 mailed Oct. 21, 2019. [cited by applicant]
Search Report with regard to the counterpart RU Patent Application No. 2018144708 completed Aug. 16, 2019. [cited by applicant]
Search Report with regard to the counterpart RU Patent Application No. 2018147431 completed Aug. 15, 2019. [cited by applicant]
English Translation of KR10-2007-0049514 (Description, Claims) retrieved on Espacenet on Oct. 15, 2019. [cited by applicant]
English Abstract of KR10-1514984 retrieved on Espacenet on Oct. 15, 2019. [cited by applicant]
International Search Report and Written Opinion with regard to the counterpart Patent Application No. PCT/RU2019/000232 mailed Jan. 9, 2020. [cited by applicant]
English Abstract for CN106355450 retrieved on Espacenet on Jan. 4, 2021. [cited by applicant]
English Abstract for CN106202482 retrieved on Espacenet on Jan. 4, 2021. [cited by applicant]
Wikipedia, “Focus (computing)”, https://en.wikipedia.org/wiki/Focus_(computing), accessed on Jan. 4, 2021, pdf 5 pages. [cited by applicant]
Wikipedia, “Collaborative software”, https://en.wikipedia.org/wiki/Collaborative_software, accessed on Jan. 4, 2021, pdf 11 pages. [cited by applicant]
Office Action issued in respect of the related U.S. Appl. No. 16/194,578 mailed Oct. 12, 2022. [cited by applicant]