Patent ID: 8793787

Claim:
A computer implemented method for detecting malicious network content by a network content processing system, comprising: receiving network content detected to be suspicious; identifying a real application that is affected by the suspicious network content; providing a virtual environment component that is associated with the identified real application and selected from a virtual environment component pool to a virtual environment; configuring the virtual environment component within a virtual environment to mimic the identified real application to process the suspicious network content within the network content processing system, the virtual environment being one of a plurality of concurrently existing virtual environments within the network content processing system, each virtual environment of the concurrently existing virtual environments including a respective virtual environment operating system to process respective suspicious network content to detect whether the respective suspicious network content contains malicious network content; processing the suspicious network content using the virtual environment component within the virtual environment, the virtual environment component operating as a browser application which provides the suspicious network content for rendering as at least part of a content page; and identifying the suspicious network content as malicious network content based on a behavior of the virtual environment component.