Patent ID: 7877803
Filing Date: 2011-01-25
Classification: G06F,H04L

Abstract:
1. A system operably connectable to a computer, the system comprising: a behavior logic stored on a computer-readable recording medium, configured to identify that the computer is exhibiting a behavior that indicates that the computer may be infected by a malicious software; and an immune response logic stored on a computer-readable recording medium, configured to identify that a request to connect to a remote host has been made, identify the remote host to which the request applies, identify a rate at which attempts to connect to remote hosts are being made by processes executing on the computer to identify that the computer is exhibiting the behavior, identify a process that is related to the behavior and that is executing on the computer, the immune response logic also being configured to automatically make an immune response with respect to the process, the behavior logic and the immune response logic being configured to operate substantially in parallel with each other and with an operating system executing on the computer.