Patent ID: 8763123

Claim:
A method comprising: receiving, at a base computer, details uniquely identifying one or more security products operating at a point in time on a remote computer; receiving, at the base computer, details uniquely identifying one or more security products operating on other remote computers in communication with the base computer; receiving, at the base computer, details of a process that has been executed by at least one of the other remote computers; determining, by the base computer and based on the received details of the process that has been executed by the least one of the other remote computers, that the process is a malware process not identified by the one or more security products operating on the at least one of the other remote computers; and determining, by the base computer, that the remote computer is vulnerable to the malware process, wherein the determination is based on the at least one of the other remote computers having a same or similar combination of security products as the combination of security products operating on the remote computer.