| CPC H04L 63/1433 (2013.01) | 20 Claims |

|
1. A system comprising one or more processing devices and one or more non-transitory storage devices for storing instructions, wherein execution of the instructions by the one or more processing devices causes the one or more processing devices to:
receive, by a security application, one or more machine-readable codes;
decode the one or more machine-readable codes to derive decoded data corresponding to the one or more machine-readable codes;
analyze, by a multi-context threat detection system of the security application, a plurality of risk assessment attributes associated with the one or more machine-readable codes, wherein analyzing the plurality of risk assessment attributes includes:
(a) analyzing at least one code attribute corresponding to the one or more machine-readable codes;
(b) analyzing at least one decoded data attribute corresponding to the decoded data derived from the one or more machine-readable codes;
(c) analyzing at least one target network resource attribute corresponding to a target network resource detected as being affiliated with the one or more machine-readable codes;
(d) analyzing at least one entity attribute corresponding to an entity detected as being affiliated with the one or more machine-readable codes; and
(e) analyzing at least one end-user attribute corresponding to one or more end-users that scanned or input the one or more machine-readable codes or one or more computing devices operated by the one or more end-users; and
generate, by the security application, risk quantification data corresponding to the one or more machine-readable codes based, at least in part, on the at least one code attribute, the at least one decoded data attribute, the at least one target network resource attribute, and the at least one end-user attribute.
|