Patent ID: 8533835

Claim:
A method for detecting malware, comprising: dividing a portion of data of an electronic device to be scanned for malware into at least a first data segment and a second data segment; dividing a signature corresponding to an indication of malware into at least a first signature segment and a second signature segment, wherein said signature is not identical to the portion of data; performing, by a processor, a mathematical relationship function on the first signature segment and the second signature segment, yielding a first result, the relationship function characterizing the relationship between at least two information sets; performing said relationship function on the first data segment and the second data segment, yielding a second result; comparing the first result and the second result; based on the comparison, determining that the portion of data of the electronic device includes information corresponding to said signature so as to perform a search of said first two segments of the portion of data for said signature by using said relationship function for the detection of malware.