1. A computer implemented method for detecting malicious websites based on end user data submission statistics, the method comprising the steps of:
receiving data from each of a plurality of user computers which has been marked by the user computers as confidential information;
aggregating data received from the plurality of user computers;
analyzing the aggregated data, comprising:
performing adaptive statistical anomaly detection, by applying statistical usage profiling to continuously modify a baseline;
measuring confidential information disclosure activity in relation to the baseline;
comparing the short-term profile to the long-term profile; and
detecting a statistically significant deviation between the two profiles, the deviation indicating a short term increase in submission of confidential information to a website;
based on the statistical analysis, detecting anomalous behavior concerning submission of aggregated confidential information received from the plurality of user computers to a website; and
responsive to detecting the anomalous behavior concerning submission of confidential information to a website, performing at least one additional step to protect users from submitting confidential information to that website.
2. The method of claim 1 wherein detecting anomalous behavior concerning submission of aggregated confidential information to a website further comprises:
detecting an increase in submission of confidential information to a website.
3. The method of claim 1 further comprising:
over a period of time, incorporating short-term observed usage into the long-term usage profile, to account for legitimate changes in website behaviors.
4. The method of claim 1 wherein performing at least one additional step to protect users from submitting confidential information to the website further comprises:
transmitting an alert to at least one destination from a group of destinations comprising: an automated computer security system, a technician, a system administrator and a user.
5. The method of claim 1 wherein performing at least one additional step to protect users from submitting confidential information to the website further comprises performing at least one step from a group of steps consisting of:
publishing a new rule to protect against submission of confidential information to the website;
adding the website to a list of known bad sites;
transmitting a warning concerning the site to at least one user; and
initiating a process to have the website shut down.
6. At least one non-transitory computer readable medium storing a computer program product for detecting malicious websites based on end user data submission statistics, the computer program product comprising:
program code for receiving data from each of a plurality of user computers which has been marked by the user computers as confidential information;
program code for aggregating data received from the plurality of user computers;
program code for analyzing the aggregated data, comprising:
performing adaptive statistical anomaly detection, by applying statistical usage profiling to continuously modify a baseline;
measuring confidential information disclosure activity in relation to the baseline;
comparing the short-term profile to the long-term profile; and
detecting a statistically significant deviation between the two profiles, the deviation indicating a short term increase in submission of confidential information to a website
based on the statistical analysis, program code for detecting anomalous behavior concerning submission of aggregated confidential information received from the plurality of user computers to a website; and
program code for responsive to detecting the anomalous behavior concerning submission of confidential information to a website, performing at least one additional step to protect users from submitting confidential information to that website.
7. The computer program product of claim 6 wherein the program code for detecting anomalous behavior concerning submission of aggregated confidential information to a website further comprises:
program code for detecting an increase in submission of confidential information to a website.
8. The computer program product of claim 6 further comprising:
program code for, over a period of time, incorporating short-term observed usage into the long-term usage profile, to account for legitimate changes in website behaviors.
9. The computer program product of claim 6 further comprising:
program code for, responsive to detecting the anomalous behavior concerning submission of confidential information to a website, determining the website is being used for phishing.
10. The computer program product of claim 6 wherein the program code for performing at least one additional step to protect users from submitting confidential information to the website further comprises:
program code for transmitting an alert to at least one destination from a group of destinations comprising:
an automated computer security system, a technician, a system administrator and a user.
11. The computer program product of claim 6 wherein the program code for performing at least one additional step to protect users from submitting confidential information to the website further comprises program code for performing at least one step from a group of steps consisting of:
publishing a new rule to protect against submission of confidential information to the website;
adding the website to a list of known bad sites;
transmitting a warning concerning the site to at least one user; and
initiating a process to have the website shut down.
12. A computer system for detecting malicious websites based on end user data submission statistics, the computer system comprising:
an interface to receive data from each of a plurality of user computers which has been marked by the user computers as confidential information;
a database to aggregate data received from the plurality of user computers;
an anomalous behavior ID component to analyze the aggregated data, and to detect anomalous behavior concerning submission of aggregated confidential information received from the plurality of user computers to a website, wherein analyzing the aggregated data comprises performing adaptive statistical anomaly detection, by applying statistical usage profiling to continuously modify a baseline, measuring confidential information disclosure activity in relation to the baseline, comparing the short-term profile to the long-term profile and detecting a statistically significant deviation between the two profiles, the deviation indicating a short term increase in submission of confidential information to a website; and
a reaction component to, responsive to detecting the anomalous behavior concerning submission of confidential information to a website from the statistical analysis, perform at least one additional step to protect users from submitting confidential information to that website.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A precursor structure comprising:
a substrate having a surface which includes topography formed therein, said topography comprising holes, trenches, or a combination of holes and trenches, said holes and trenches having respective sidewalls and bottomwalls and having respective initial, uncoated widths, said sidewalls having respective uppermost and lowermost points; and
a thin, uniform coating of organic material on said sidewalls and extending from said respective uppermost points to said respective lowermost points, said organic material comprising a quantity of monomers, said bottomwalls being substantially free of said coating, said holes, trenches, or combination of holes and trenches having coated sidewalls which have a second width, said width being smaller than said initial width,
wherein said monomers comprise a light attenuating compound selected from the group consisting of fluorotoluene, naphthalene, anthracene, furan, thiophene, pyrrole, pyridine, pyrimidine, pyrazine, thiazine, oxazine, acridine, thiazole, pyrazole, oxazole, quinazoline, and quinoxaline.
2. The structure of claim 1, wherein said substrate comprises a patterned substrate selected from the group consisting of photoresist layers, ion implant layers, dielectric layers, microelectronic wafers, microelectromechanical systems structures, and functional surfaces of microelectromechanical systems.
3. The structure of claim 1, wherein said coating on said sidewalls has a thickness of from about 10-2,000 \u212b.
4. The structure of claim 1, wherein said second width is at least about 5% smaller than said initial width.
5. The structure of claim 1, wherein said light attenuating compound includes a group selected from the group consisting of alkyl, aryl, alkoxy, alicyclic, hetaryl, halogens, cyano, ester, ether, aldehydes, ketones, alcohol, phenol, nitro, amines, amides, and acetamido groups.
6. The structure of claim 1, wherein said light attenuating compound comprises an organic chromophore attached to an atom selected from the group consisting of silicon, titanium, germanium, tin, tungsten, lead, iron, cobalt, copper, magnesium, manganese, nickel, phosphorous, and aluminum atoms.
7. A precursor structure comprising:
a substrate having a surface which includes raised features formed thereon, said raised features having respective upper surfaces and sidewalls, said sidewalls cooperating with said substrate surface to form bottomwalls between said raised features, there being respective initial distances between the respective sidewalls adjacent features, said sidewalls having respective uppermost and lowermost points; and
a thin, uniform coating of organic material on said sidewalls and extending from said respective uppermost points to said respective lowermost points, said organic material comprising a quantity of monomers, said bottomwalls being substantially free of said coating, there being respective second distances between the coated sidewalls of adjacent features, said second distances being smaller than the initial distances corresponding thereto,
wherein said monomers comprise a light attenuating compound selected from the group consisting of fluorotoluene, naphthalene, anthracene, furan, thiophene, pyrrole, pyridine, pyrimidine, pyrazine, thiazine, oxazine, acridine, thiazole, pyrazole, oxazole, quinazoline, and quinoxaline.
8. The structure of claim 7, wherein said substrate is selected from the group consisting of photoresist layers, ion implant layers, dielectric layers, microelectronic wafers, microelectromechanical systems structures, and functional surfaces of microelectromechanical systems.
9. The structure of claim 7, wherein said coating on said sidewalls has a thickness of from about 10-2,000 \u212b.
10. The structure of claim 7, wherein said second distance is at least about 5% smaller than said initial distance.
11. The structure of claim 7, wherein said light attenuating compound includes a group selected from the group consisting of alkyl, aryl, alkoxy, alicyclic, hetaryl, halogens, cyano, ester, ether, aldehydes, ketones, alcohol, phenol, nitro, amines, amides, and acetamido groups.
12. The structure of claim 7, wherein said light attenuating compound comprises an organic chromophore attached to an atom selected from the group consisting of silicon, titanium, germanium, tin, tungsten, lead, iron, cobalt, copper, magnesium, manganese, nickel, phosphorous, and aluminum atoms.