Malwarebytes Corporation

Jon-Paul Lussier, Jr

Douglas Stuart Swanson

Mina Yousseif

A security server receives a full hash and a set of subhashes from a client. The security server determines that the full hash is whitelisted. The security server updates, for each subhash in the set of subhashes, an associated clean count. The security server adds a subhash to a subhash whitelist responsive to an associated clean count exceeding a threshold. The security server receives a second set of subhashes. The security server determines whether at least one of the subhashes in the second set of subhashes is included in the subhash whitelist. The security server reports to the client based on the determination.

Growing community of inventors

Spring Hill, FL, United States of America

Jon-Paul Lussier, Jr