Patent ID: 8555379

Claim:
A method for monitoring communications from a communications device, comprising: generating a non-deterministic data acquisition address in response to a request from security software on the communications device; storing, using at least one computer processor, the non-deterministic data acquisition address in a contact list of the communications device that identifies a location of a monitoring device; when malicious software uses the contact list to send messages, sending a message using the malicious software to the monitoring device using the non-deterministic data acquisition address; identifying a cause of the message as at least one of malware, SPAM, and a phishing attempt; analyzing content of the message based on a receipt of the message at the non-deterministic data acquisition address to determine whether data of the message is a hostile program; identifying the data of the message as a hostile program; generating global intelligence based on the identification of the hostile program; and distributing the global intelligence to a plurality of communications devices, wherein distribution of the global intelligence is independent of an indicia of infection of a global intelligence recipient.