Patent ID: 9117072
Filing Date: 2015-08-25
Classification: G06F,H04L

Abstract:
1. A method for remediating, via a network device including a processor and a memory, attempted exploitations associated with a plurality of computing devices, the plurality of computing devices including at least one reporting computing device, having a processor, memory, an operating system, and at least one installed application, that identifies and reports the attempted exploitations, and at least one non-reporting computing device that has not reported the attempted exploitations, the method comprising: identifying an attempted exploitation of the at least one reporting computing device; inserting a logging code into the operating system of the at least one reporting computing device based on the identifying an attempted exploitation of the at least one reporting computing device; receiving from the at least one reporting computing device, an aggregated log, wherein the aggregated log is created via the logging code on the at least one reporting computing device and comprises a log record indicating the attempted exploitations of the computing device; generating, based on the aggregated log, at least one instruction to remediate an attempted exploitation recorded in the aggregated log; and communicating the at least one instruction to the at least one reporting computing device and to the at least one non-reporting computing device.