Patent ID: 8881276

Claim:
A non-transitory machine-readable medium comprising machine-readable instructions stored on the machine-readable medium, the machine-readable instructions being effective to cause a machine to: determine a processing load associated with detected network data having source information; when the processing load is determined to not exceed a predetermined processing level, apply an intrusion prevention policy that analyzes the detected network data; when the processing load is determined to exceed the predetermined processing level, further determine whether the source information of the detected network data is associated with source information in a whitelist; when the computing device has determined that the processing load exceeds the predetermined processing level and has determined that the source of the network data is associated with source information in the whitelist, bypass application of the intrusion prevention policy, and when the computing device has determined that the processing load exceeds the predetermined processing level and has determined that the detected network data is not associated with source information in a whitelist, apply the intrusion prevention policy; and update the whitelist to include source information for network data that does not include malicious content.