Patent ID: 8931086
Filing Date: 2015-01-06
Classification: G06F

Abstract:
1. A method of detecting malware on a computer, comprising: identifying files of unknown trustworthiness as potential threats on the computer based on at least a white list; receiving a trustworthiness level for each of the files from a backend, wherein the backend is configured to service queries for trustworthiness levels and coordinate updates to the white list, and wherein the trustworthiness level for each of the files is one of a plurality of trustworthiness levels comprising a provider trusted level, a community trusted level, a community presence level, and unknown in order of decreasing trustworthiness; comparing the trustworthiness level of each of the files to a threshold level, wherein the threshold level corresponds to one of the plurality of trustworthiness levels; designating each of the files where the trustworthiness level thereof satisfies the threshold level as a false positive threat; and designating each of the files where the trustworthiness level thereof does not satisfy the threshold level as a true positive threat.