US 12,244,618 B2
Systems and methods for prioritizing URL review for sandboxing based on accelerated velocities of URL features in network traffic
Gregory Lee Wittel, Mountain View, CA (US); and Edward Pavlov, San Jose, CA (US)
Assigned to PROOFPOINT, INC., Sunnyvale, CA (US)
Filed by Proofpoint, Inc., Sunnyvale, CA (US)
Filed on Dec. 21, 2023, as Appl. No. 18/393,335.
Application 18/393,335 is a continuation of application No. 17/214,627, filed on Mar. 26, 2021, granted, now 11,882,131.
Claims priority of provisional application 63/133,122, filed on Dec. 31, 2020.
Prior Publication US 2024/0171598 A1, May 23, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/1416 (2013.01) [H04L 63/1441 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A method, comprising:
processing, by a computer, universal resource locators (URLs) into URL segments;
determining, by the computer, URL features from the URL segments;
determining, by the computer, a traffic velocity acceleration model for each respective URL feature of the URL features;
tracking, by the computer, velocities of the URL features in email traffic coming into an enterprise computing environment within a time period, wherein the tracking comprises applying traffic velocity acceleration models, each traffic velocity acceleration model corresponding to the respective URL feature of the URL features;
analyzing, by the computer, acceleration of the velocities of the URL features;
based on a result from the analyzing, prioritizing, by the computer, how the URLs are processed through a processing pipeline;
applying a time decay function to the URL features, wherein application of the time decay function to a URL feature produces a weight that represents an importance of the URL feature relative to time; and wherein age of the URL can be measured using timestamps corresponding to backward from the current time; and
purging the URL features utilizing the weight.