The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 06, 2015

Filed:

Apr. 09, 2012
Applicants:

Michael Tony Alagna, Austin, TX (US);

Mark Obrecht, Austin, TX (US);

Andy Payne, Austin, TX (US);

Peter Norwood, Austin, TX (US);

Inventors:

Michael Tony Alagna, Austin, TX (US);

Mark Obrecht, Austin, TX (US);

Andy Payne, Austin, TX (US);

Peter Norwood, Austin, TX (US);

Assignee:

Symantec Corporation, Mountain View, CA (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 11/00 (2006.01); G06F 11/30 (2006.01); G06Q 20/40 (2012.01); G06F 21/56 (2013.01); G06F 21/55 (2013.01);
U.S. Cl.
CPC ...
G06F 21/554 (2013.01); G06Q 20/40 (2013.01); G06F 21/566 (2013.01);
Abstract

Techniques for categorizing programs running on an information handling system. One method includes, while a program is running on an information handling system in a manner that permits the program to infect the information handling system, calculating a first score and a second score. The first score is indicative of the likelihood that the program is malicious; the second score is indicative of the likelihood that the program is valid. This method further includes categorizing the program with respect to the likelihood of the program infecting the information handling system, including by categorizing the program as valid code based on the second score being above a threshold value, regardless of the first score.


Find Patent Forward Citations

Loading…