Patent ID: 9171156
Filing Date: 2015-10-27
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for managing malware signatures, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: maintaining a set of active malware signatures; maintaining a set of dormant malware signatures, wherein each malware signature from the set of dormant malware signatures represents a malware threat that may be less prevalent in a community than each malware signature from the set of active malware signatures; providing the set of active malware signatures for use in malware detection more frequently than the set of dormant malware signatures by sending the set of active malware signatures to each of a set of clients to be stored at each of the set of clients for use by each of the set of clients in malware detection scans, wherein the set of dormant malware signatures is stored in a cloud-based environment that is accessible to the set of clients; determining that a threat associated with a first malware signature from the set of dormant malware signatures is becoming more prevalent in the community by determining that the first malware signature from the set of dormant malware signatures has triggered one or more positive malware detection responses; in response to the determination that the threat associated with the first malware signature from the set of dormant malware signatures is becoming more prevalent, moving the first malware signature from the set of dormant malware signatures to the set of active malware signatures.