In-House Innovation Enables Proactive Early Detection of Phishing Domains for Enhanced Threat Defence.
SINGAPORE, October 23, 2023 (ACN Newswire): Ensign InfoSecurity (Ensign), the largest pure-play, end-to-end cybersecurity service provider in Asia Pacific, announced today that it has been granted a patent for “a system and method for detecting phishing domains in a set of Domain Name System (DNS) records”.
This patent marks a significant contribution to addressing the critical challenge of detecting phishing domains, a tool frequently exploited by cybercriminals for phishing attacks. This invention introduces four key modules: the homoglyph phishing domain detection module, the typo-squatting phishing domain detection module, the general phishing domain detection module, and the alert module. These modules work in synergy, collectively identifying and flagging phishing domains within a designated set of DNS records. The method goes beyond traditional approaches such as Levenshtein edit distance by integrating keyboard distance, ensuring fewer inaccuracies, and enhancing precision in pinpointing phishing domains. In addition, it is adaptable to the evolving landscape of homoglyph attacks, factoring in visual characteristics and Punycode representations. By facilitating early detection of phishing domains, especially those that exploit human behaviours, this invention offers proactive cybersecurity as it recognises potential threats earlier in the cyber attack timeline. This proactive approach enhances the defence against emerging threats.
“Our latest innovation is designed to pre-emptively detect phishing domains, safeguarding entities before harm is done. This patent is a testament to the proactive measures we take to shield businesses from emerging cyber threats, which lead to data breaches, financial losses, and reputational harm,” said Mr. Tan Ah Tuan, Head of Labs at Ensign. “Ensign’s innovations are conceived and developed in-house, and it underscores our commitment to pushing the boundaries in cybersecurity.”
Our previous patents also stand as significant milestones:
· Patented: Self-Learning Threat Detection: This patent describes a method to train threat detection models for network traffic data without needing a completely labelled dataset. It leverages both indicators of compromise (IoCs) and pre-existing models to generate partial labels for model training. This innovative approach is subsequently harnessed to enhance our threat detection capabilities by incorporating all available IoCs and historical insights. Ensign thus maximises the potential of the dataset for training advanced threat detection models. It also empowers the team to maintain a competitive edge in developing models by extending their prior knowledge to unlabeled data and incorporating it into their training process.
· Patented: Approach to Detecting Domain Generation Algorithm (DGA) Attacks: Ensign’s proprietary DGA detection model filters extensive network traffic to identify DGA traits and confirm if any successful connections to malicious domains occurred. By deploying Ensign’s DGA detection model, organisations can significantly decrease the volume of alerts linked to such communications. This substantially enhances accuracy and accelerates response time.
Do Follow: CIO News LinkedIn Account | CIO News Facebook | CIO News Youtube | CIO News Twitter
About us:
CIO News, a proprietary of Mercadeo, produces award-winning content and resources for IT leaders across any industry through print articles and recorded video interviews on topics in the technology sector such as Digital Transformation, Artificial Intelligence (AI), Machine Learning (ML), Cloud, Robotics, Cyber-security, Data, Analytics, SOC, SASE, among other technology topics.
