Patent ID: 9311480
Filing Date: 2016-04-12
CPC Classification: G06F

Claim Text:
1. At least one non-transitory machine accessible storage medium having instructions stored thereon, the instructions when executed on a machine, cause the machine to: receive a query from a particular host device; identify a file detected by an antimalware tool local to the particular host device; determine that the particular host device is associated with a particular one of a plurality of domains, wherein each domain corresponds to a respective network; identify that a particular one of a plurality of sets of rules corresponds to the particular domain; determine a particular security score for the file based on the particular set of rules, wherein a different security score is to be determined for the file when detected local to a host device in a different one of the plurality of domains; determine particular reputation data for the file based at least in part on the security score, wherein the particular reputation data includes the security score and information detected by one or more other devices identifying characteristics of the file relevant to the antimalware tool; and send a response to the query to the particular host device, wherein the response includes the particular reputation data.