Patent ID: 9332025
Filing Date: 2016-05-03
CPC Classification: H04L

Claim Text:
1. A computer-implemented method for detecting suspicious files, at least a portion of the method being performed by a computing device comprising at least one hardware processor, the method comprising: detecting, by a detection module of the computing device, a file within incoming file traffic directed to a file recipient; identifying, by an identification module of the computing device, a type of the file within the incoming file traffic directed to the file recipient; determining, by a determination module of the computing device, a frequency with which the type of the file appears within the incoming file traffic directed to the file recipient in comparison to frequencies with which other types of files appear within the incoming file traffic directed to the recipient by: performing, by a security module of the computing device, a security action on the file in response to the frequency of the type of the file within the incoming file traffic falling below the predetermined threshold.