Patent ID: 9055090
Filing Date: 2015-06-09
Classification: H04L

Abstract:
1. A method, comprising steps of: monitoring, by one or more servers in a network, network traffic of the network for a security attack with respect to a computing device, the one or more servers including a malware detection element, a correlation engine, a logic engine and a device command and control service (DCCS) element, the monitoring comprising: responsive to the detected security attack, determining, by the logic engine, a corrective action to take for the computing device, the corrective action tailored based on at least one of: determining, by the logic engine, whether an account of the computing device includes a security attack protection service; and sending, by the DCCS element, a message over a secure communication link through the network to the computing device when the logic engine determines that the account includes the security attack protection service, the message including instructions that trigger an application program configured to cure malware on the computing device to automatically implement the tailored corrective action.