Patent ID: 8060577
Filing Date: 2011-11-15
Classification: G06F,H04L

Abstract:
1. A computing system implemented process for employing user input to classify unknown files comprising: using a processor associated with a computing system to monitor files downloaded onto a given user computing system; using a processor associated with a computing system to compare a given file downloaded onto the given user computing system with known file classification data in an attempt to classify the given file downloaded onto the given user computing system as a malicious file or a legitimate file; as a result of the comparison of the given file downloaded onto the given user computing system with the known file classification data, determining that the given file downloaded onto the given user computing system cannot currently be classified as either a malicious file or a legitimate file, thereby transforming the status of the given file downloaded onto the given user computing system to a given unknown/unclassified file; requesting user input regarding the legitimacy of the given unknown/unclassified file from a given user associated with the given user computing system; obtaining user input regarding the legitimacy of the given unknown/unclassified file from the given user associated with the given user computing system; storing data representing the user input regarding the legitimacy of the given unknown/unclassified file in a memory system associated with a computing system; obtaining data representing a classification of the given unknown/unclassified file from at least one source other than the given user associated with the given user computing system, thereby transforming the status of the given unknown/unclassified file downloaded onto the given user computing system to a known/classified file; using a processor associated with a computing system to compare the data representing the user input regarding the legitimacy of the given unknown/unclassified file with the data representing the classification of the given unknown/unclassified file from at least one source other than the given user associated with the given user computing system to determine the accuracy of the user input regarding the legitimacy of the given unknown/unclassified file; using a processor associated with a computing system to calculate a reliability score to be associated with the given user, the reliability score being calculated based, at least in part, on the comparison of the data representing the user input regarding the legitimacy of the given unknown/unclassified file with the data representing a classification of the given unknown/unclassified file from at least one source other than the given user; and using a processor associated with a computing system to the determine a value to be assigned to future user input regarding the legitimacy of unknown/unclassified files from the given user based, at least in part, on the given user's reliability score, thereby transforming subsequent data representing user input regarding the legitimacy of unknown/unclassified files from the given user into weighted data representing user input regarding the legitimacy of unknown/unclassified files.