Patent ID: 8621608

Claim:
A non-transitory computer readable medium comprising instructions stored thereon to cause one or more processors to: determine, by a device, an absence of a first activity that was previously identified on the device, wherein the first activity is predetermined to be associated with an increased vulnerability of the device to unwanted data, and wherein the absence is determined utilizing a first level of monitoring of the device; dynamically adjust to a second level of monitoring of the device in response to the determination of the absence of the first activity, wherein the second level of monitoring of the device comprises monitoring for one or more fewer types of accesses performed by the first activity, the one or more fewer types of accesses representing a subset of types of accesses being monitored utilizing the first level of monitoring; and dynamically adjust from a first level of scanning to a second level of scanning in response to the identification of the first activity, wherein the first level of scanning comprises scanning a first subset of a memory local to the device for the unwanted data and the second level of scanning comprises scanning a second subset of the memory local to the device for the unwanted data.