Patent ID: 8528080

Claim:
A computer-implemented method of sampling files for malware tracking on a mobile device, the computer-implemented method comprising: receiving a sampling module deployed to the mobile device, the sampling module performing steps comprising: configuring file transfer mechanisms that use short-range communication technology on the mobile device to appear, to other devices, to be open for accepting attempts to transfer files; intercepting files transferred via the short-range communication technology to the mobile device from another device; quarantining the files transferred to the mobile device; logging identifying information about the files quarantined and about the other devices from which the files originated, wherein logging identifying information comprises actively scanning each of the other devices from which the files originated by sending probes to elicit responses from said other devices so as to acquire identifying information about the other devices, and the identifying information logged about each of the other devices comprises a device type and an identification of ports on the other devices that are open for sharing files; and providing the logged identifying information for the files received to a security server for malware tracking.