Patent ID: 9027138
Filing Date: 2015-05-05
Classification: G06F,H04L

Abstract:
1. A method of identifying a malware infection, the method comprising: providing, with a premise gateway, communication between a premise network at a customer premises and an external network outside the customer premises, the premise network comprising a plurality of customer devices, wherein the customer premises is a single-family home and the premise gateway is a residential gateway; analyzing, with a malware detection device at the customer premises, network traffic between the premise network and the external network; tunneling, based on analysis of the network traffic by the malware detection device, traffic from the premise gateway over a virtual private network tunnel to a specified location in an Internet Service Provider network for further analysis of the network traffic; identifying, with the malware detection device, one or more infected customer devices that are infected with malware, based on analysis of the network traffic; and taking, with at least one of the malware detection device or the premise gateway, one or more actions to notify the customer of an identification of the one or more infected customer devices, wherein the one or more actions comprise performing domain name service (“DNS”) redirection to redirect hypertext transfer protocol (“HTTP”) requests from the one or more infected customer devices to a webpage indicating the status of the one or more infected customer devices.