Patent ID: 8931096
Filing Date: 2015-01-06
Classification: G06F,H04L

Abstract:
1. A method for identifying malware, the method comprising the steps of: identifying, by one or more processors, processes in a running process list on a first computer system; identifying, by one or more processors, ports assigned to the processes in the running process list on the first computer system; identifying, by one or more processors, ports currently in use in the first computer system; determining, by one or more processors, a first use of a first port of the ports currently in use in the first computer system but not assigned to any of the processes in the running process list in the first computer system; and determining, by one or more processors, whether a second computer system is using a second port on the second computer system in a non-malicious manner, wherein the second port on the second computer system maps to the first port on the first computer system, and