United States of America As Represented by the Secretary of the Air Force

Thomas E Dube

Steven Keith Rogers

Richard A Raines

A method, apparatus and program product are provided to recognize malware in a computing environment having at least one computer. A sample is received. An automatic determination is made by the at least one computer to determine if the sample is malware using static analysis methods. If the static analysis methods determine the sample is malware, dynamic analysis methods are used by the at least one computer to automatically determine if the sample is malware. If the dynamic analysis methods determine the sample is malware, the sample is presented to a malware analyst to adjudicate the automatic determinations of the static and dynamic analysis. If the adjudication determines the sample is malware, a response action is initiated to recover from or mitigate a threat of the sample.

Growing community of inventors

Beavercreek, OH, United States of America

Thomas E Dube