Patent ID: 9479531
Filing Date: 2016-10-25
CPC Classification: G06F,H04L

Claim Text:
1. A computer-implemented method for accelerating a malware analysis in an automated execution environment, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: monitoring, with a monitoring process executing on the computing device, a file that is a subject of the malware analysis in the automated execution environment; while monitoring the file, detecting one or more behaviors exhibited by the file during the malware analysis in the automated execution environment; determining, during the malware analysis, that the file exceeds a threshold level of suspicion based at least in part on the behaviors exhibited by the file; in response to determining that the file exceeds the threshold level of suspicion, accelerating responsiveness to an outcome of the malware analysis by initiating, via a security process executing on the computing device that is separate and distinct from the monitoring process, a security action prior to reaching a scheduled completion of the malware analysis.