Patent ID: 8117654

Claim:
A network device comprising: an information store operable to save a countermeasure useable in at least substantially reducing a harm caused by a malware (hereafter the “malware countermeasure”); a network analyzer coupled to the information store, the network analyzer module operable to generate a topological map to identify each respective node of a plurality of network nodes including at least one sub-network of a plurality of sub-networks; a transmission circuit for sending a packet to at least the one sub-network of the plurality of sub-networks; a protection circuit for implementing the malware countermeasure in the network device, the implementing the malware countermeasure including at least substantially reducing a communication privilege allowed a node of one sub-network of the plurality of sub-networks, wherein the node is operable to communicate after the protection circuit implements the malware countermeasure in the network device, the implementing the malware countermeasure further including at least substantially reducing a functionality of the network device, the reduced functionality including a restriction against performing a destructive writing operation, a blocking an application from running, and a forcing a user and/or an application to execute in a tighter security environment; and a decision circuit for determining if a criterion is met for implementation of the malware countermeasure.