Patent ID: 11861006
Assignee: AVAST SOFTWARE S.R.O.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G  H

Claim 15:
16. A method of generating a reference file set having high-confidence malware severity classification, comprising:
selecting a subset of files from a group of files first observed during a recent observation period;
polling a plurality of other antivirus providers for their third-party classification of the files in the subset of files and for their third-party classification of a plurality of files from the group of files not in the subset;
determining a malware severity classification for the files in the subset by aggregating the polled classifications from the other antivirus providers for the files in the subset after a stabilization period of time;
adding one or more first additional files to the subset having a third-party classification from at least one of the polled other antivirus providers that changed during the stabilization period;
adding one or more second additional files to the subset selected to improve representation of malware types seen during recent observation period in a distribution of malware types in the subset;
determining a malware severity classification for the one or more first and second additional files added to the subset by aggregating the polled classifications from the other antivirus providers for the added files.