Patent ID: 8627475

Claim:
One or more computer-readable memories that store executable instructions to detect potential threats, wherein the instructions, when executed by a computer, cause the computer to perform acts comprising: receiving, from a machine, crash data concerning a program that has crashed on said machine, said program having received content from a content provider, said content hosting an advertisement provided by an advertisement provider, said advertisement provider being distinct from said content provider; analyzing said crash data to identify a nature of an attempted attack that caused said program to crash, said analyzing determining that said attempted attack is being made through said advertisement; and using said crash data to take one or more actions, wherein said one or more actions either notify a user of a potential threat, notify a software manufacturer of a potential exploit of the manufacturer's software, or take remedial action to mitigate threats from an attack of the nature that was identified, said one or more actions further notifying said advertisement provider that a customer of said advertisement provider is using said advertisement provider to deliver weaponized advertisements, said one or more actions comprising downloading code that is known to be malware from a site that is discovered through said crash data, and developing an anti-virus signature of said malware.