Patent ID: 8584240
Filing Date: 2013-11-12
Classification: G06F,H04L

Abstract:
1. An apparatus for updating a rating database arrangement, said rating database arrangement being implemented in at least one server device, said apparatus comprising: a programmed computing device remote from said at least one server device, said programmed computing device being configured to intercept at least an access request associated with at least a Uniform Resource Locator (URL); an anti-virus engine implemented in said programmed computing device, said anti-virus engine being configured at least for scanning a payload associated with said URL to generate a scanning result, said scanning result including a safe scanning result, said safe scanning result indicating that said payload includes no malicious code known to said anti-virus engine; a feedback module implemented in said programmed computing device, said feedback module being configured at least for extracting said safe scanning result generated by said anti-virus engine and sending said safe scanning result to said rating database arrangement, said feedback module being further configured for extracting an other-than-safe scanning result generated by said anti-virus engine from scanning a second payload, said feedback module being further configured for sending said other-than-safe scanning result to said rating database arrangement, said second payload being associated with a second URL, said other-than-safe scanning result indicating potential existence of malicious code associated with said second payload; a list of known malicious code; a suspicious list, said suspicious list being different from said list of known malicious code; a receive module configured at least for receiving said other-than-safe scanning result from said feedback module, said list of known malicious code being at least one of a rating database and a list in said receive module, said receive module including logic for comparing said other-than-safe scanning result against said list of known malicious code to determine whether any exact match exists between said other-than-safe scanning result and said list of known malicious code, wherein if an exact match between said second payload and at least a known malicious payload in said list of known malicious code is identified according to said comparing, then said rating database arrangement is updated to include said second URL, and wherein if no exact match between said second payload and any known malicious payload in said list of known malicious code is identified according to said comparing, then said second URL is recorded on said suspicious list; and circuits implemented in said computing device for performing tasks associated with said anti-virus engine and said feedback module.