Patent ID: 9189621
Filing Date: 2015-11-17
Classification: G06F,H04L

Abstract:
1. A system for determining whether a downloadable is suspicious, comprising: at least one processor for accessing elements stored in at least one memory associated with the at least one processor and for executing instructions associated with the elements, the elements including: a plurality of operating system probes operating substantially in parallel for monitoring a plurality of subsystems of the operating system during runtime for an event caused from a request made by a downloadable; an interrupter for interrupting processing of the request; a first comparator coupled to the plurality of operating system probes for comparing information pertaining to the downloadable against a predetermined security policy, wherein the information pertaining to the downloadable includes information pertaining to an operation of the downloadable and distinct from information pertaining to the request; and a response engine for performing a predetermined responsive action based on the comparison.