Abstract: A method, apparatus, and a computer-readable medium for a web object reputation processing, especially in Web3. The method includes: intercepting data transmitted in a data connection related to a current decentralized application running in a user apparatus, wherein the current decentralized application comprises a frontend implementing a web user interface for a user of the user apparatus, and a backend implemented as a smart contract; determining a reputation of a web object related to the frontend of the current decentralized application; and in response to determining that the reputation of the web object is malicious, blocking the data connection.

Abstract: Network device identification is disclosed. A set of data attributes relating to at least two different data types is extracted from network traffic data associated with each user device of a set of user devices. A cluster data set of one or more known device clusters is expanded with the set of data attributes for generating an expanded cluster data set. One or more new device clusters is identified from the expanded cluster data set of the one or more known device clusters by using similarity-based metrics and a weighting factor selected based on the data types of the set of data attributes, and one or more device identification rules is generated based on the one or more new device clusters.