Patent ID: 8332946
Filing Date: 2012-12-11
Classification: H04L

Abstract:
1. A malware-protection method comprising: (a) providing a processor; (b) providing a memory interoperably coupled to the processor and having computer code stored thereon; (c) using the processor and the memory in combination to perform at least one of steps (d)-(k); (d) responsive to an access request for a new file from an endpoint computer of a plurality of endpoint computers, verifying, as safe for access, an access location of the new file; (e) receiving, on the endpoint computer, the new file; (f) responsive to step (e), comparing the new file against an application-data-signature whitelist in data communication with the endpoint computer; (g) responsive to a new-file status of unknown in response to step (f), transmitting a generated new-file fingerprint to application-verification server; (h) responsive to step (g), comparing the generated new-file fingerprint against an application-data-signature whitelist in data communication with the application verification server; (i) responsive to a new-file status of unknown in response to step (h), scanning the new file against a malware-definition file in data communication with the application-verification server; (j) responsive to a new-file status of unknown in response to step (i), sending the new file to a cloud-based malware-scanning engine; (k) responsive to a determination by the cloud-based malware-scanning engine that the new file is not good: