Patent ID: 8695095
Filing Date: 2014-04-08
Classification: G06F,H04L,H04W

Abstract:
1. A method, comprising: receiving, by a system comprising a processor, data identifying an interne protocol address that is associated with actions determined to be characteristic of malicious software behavior, and a profile of the malicious software behavior being exhibited, wherein the data comprises information identifying a physical location; comparing, by the system, the interne protocol address and the information identifying a physical location to a mobility log that stores information identifying a set of internes protocol addresses used by a set of devices at a set of physical locations associated with a wireless network; determining, by the system, an identity of a device associated with the internes protocol address by matching the interne protocol address to one of the set of internet protocol addresses and the physical location to one of the set of physical locations that corresponds to the device; and communicating, by the system, the profile to the device in response to a length of time that the internet protocol address is associated with the device being determined to satisfy a minimum duration threshold.