Patent ID: 8370942
Filing Date: 2013-02-05
Classification: G06F,H04L

Abstract:
1. A computer implemented method for proactively analyzing binary files from suspicious sources, the method comprising the steps of: receiving information concerning malware infections from a plurality of sources, by a computer; analyzing the information concerning the malware infections received in the past from the plurality of sources to determine suspiciousness levels associated with specific ones of the plurality of sources, the suspiciousness levels at least in response to detection of malware on the specific ones of the plurality of sources, by a computer to which the detected malware is previously unknown; responsive to a given suspiciousness level associated with at least one source from the plurality of sources reaching a given threshold, transmitting, by a computer, submission instructions directing the at least one source to submit all current binary files to be analyzed, at least a portion of the binary files comprising binary files not associated with detected malware infections; receiving binary files from the at least one source according to the submission instructions, by a computer; and analyzing the binary files not associated with detected malware infections received from the at least one source, to protect the plurality of sources from new malware originating from the at least one source, by a computer.