Patent ID: 8800040
Filing Date: 2014-08-05
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for prioritizing the monitoring of malicious uniform resource locators for new malware variants, the method comprising: identifying a plurality of malicious uniform resource locators, wherein each malicious uniform resource locator within the malicious uniform resource locators has previously pointed to a corresponding malware sample; collecting priority information for each of the malicious uniform resource locators to determine a non-zero and non-one probability that each of the malicious uniform resource locators will point to a new malware sample that is distinct from the corresponding malware sample previously pointed to by the malicious uniform resource locator; assigning a monitoring-priority level to each malicious uniform resource locator that monotonically increases with the probability that the malicious uniform resource locator will point to a new malware sample that is distinct from the corresponding malware sample previously pointed to by the malicious uniform resource locator, wherein assigning the monitoring-priority level optionally comprises modifying the monitoring-priority level with a manual-adjustment number; allocating an amount of monitoring resources for monitoring the malicious uniform resource locator for new malware samples based on the monitoring-priority level; monitoring each malicious uniform resource locator for new malware samples using the amount of monitoring resources allocated for monitoring the malicious uniform resource locator based on the monitoring-priority level, wherein at least one lower-priority malicious uniform resource locator within the malicious uniform resource locators is monitored for new malware samples using an amount of monitoring resources that is less than an amount of monitoring resources allocated to monitoring a higher-priority malicious uniform resource locator within the malicious uniform resource locators.