Patent ID: 11941123
Assignee: UAB 360 IT
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 12:
13. A non-transitory computer-readable medium storing computer-executable instructions that when executed by a server cause the server to:
receive a first set of labeled training data, wherein the first set of training data comprises a plurality of files and each file of the plurality of files is labeled as either malware or not malware;
train a first malware model using at least some of the first set of training data, wherein the first malware model is a static malware model;
train a second malware model using at least some of the first set of training data, wherein the second malware model is a dynamic malware model;
provide the first malware model and the second malware model to each computing device of a plurality of computing devices through a network;
receive at least a portion of a first file and a probability that the first file is malware from a first computing device of the plurality of computing devices through the network, wherein the first file is not part of the plurality of files and the probability was generated using the second malware model;
retrain the first malware model using the at least a portion of a first file and a probability that the first file is malware; and
provide the retrained first malware model to the first computing device.