Malwarebytes Corporation

Mina Yousseif

Douglas Stuart Swanson

Jon-Paul Lussier, Jr

A security server receives a full hash and a set of subhashes from a client. The security server determines that the full hash is whitelisted. The security server updates, for each subhash in the set of subhashes, an associated clean count. The security server adds a subhash to a subhash whitelist responsive to an associated clean count exceeding a threshold. The security server receives a second set of subhashes. The security server determines whether at least one of the subhashes in the second set of subhashes is included in the subhash whitelist. The security server reports to the client based on the determination.

Growing community of inventors

Clearwater, FL, United States of America

Mina Yousseif