Emc IP Holding Company LLC

University of North Carolina at Chapel Hill

Viktor Heorhiadi

Ari Juels

Alina Oprea

Ting-Fang Yen

Michael Kendrick Reiter

A processing device comprises a processor coupled to a memory and is configured to obtain data characterizing host devices of a computer network of an enterprise. The data is applied to a logistic regression model to generate malware infection risk scores for respective ones of the host devices. The malware infection risk scores indicate likelihoods that the respective host devices will become infected with malware. The logistic regression model incorporates features of the host devices including at least user demographic features, virtual private network (VPN) activity features and web activity features of the host devices, and the data characterizing the host devices comprises data for the incorporated features. Proactive measures are taken to prevent malware infection in a subset of the host devices based at least in part on the malware infection risk scores. The processing device may be implemented in the computer network or an associated network security system.

Growing community of inventors

Chapel Hill, NC, United States of America

Viktor Heorhiadi