Patent ID: 8832827

Claim:
A method of recovering from a malfunction of at least one resource of a mobile device in response to a malware attack, the mobile device including a processor, the at least one resource being coupled to at least one sensor, the at least one sensor being coupled to a fault analysis block and to the processor, the fault analysis block being coupled with the recovery block, the method comprising the procedures of: monitoring by said at least one sensor said at least one resource for information possibly indicative of an affected said at least one resource from said malware attack, said monitoring including at least periodically sensing operation of said at least one resource, in anticipation of receiving signals from respective said at least one resource within a set time period; determining whether said information meets at least one criterion of a suspicious event possibly indicative of malfunction of said at least one resource; diagnosing said suspicious event by said fault analysis block to determine whether said suspicious event is to be identified as a malfunction event of said at least one resource; and initiating at least one recovery-related action in an escalating extent by said recovery block, according to at least one of the following criteria: said suspicious event is identified as said malfunction event, and failure to receive said signals within said set period of time.