Patent ID: 8997230
Filing Date: 2015-03-31
Classification: G06F,H04L

Abstract:
1. A computer-implemented method comprising: determining, by a computing device, that a first security measure has been compromised, including detecting a triggering feature of malicious software, wherein the first security measure is executed on a mobile device; determining, by the computing device, a corrective measure against the malicious software to be performed on the mobile device; calculating an amount of delay time for performing the corrective measure, the amount of delay time being configured to prevent identification, by a user using a temporal connection between the triggering feature and the corrective measure to determine a causal relationship between the triggering feature and the corrective measure, of the triggering feature of the malicious software from other features of the malicious software; and performing the corrective measure after the amount of delay time has passed since the triggering feature is detected, wherein actions including calculating the amount of delay time and performing the corrective measure after the amount of delay time are designated as removing temporal locality of the corrective measure from the triggering feature.