Patent ID: 8646084

Claim:
A security arrangement for assessing a risk level associated with launching acquired objects in an associated computer system, the security arrangement comprising: computing hardware, including a processor, a data store, input/output facilities, and a user interface; an operating system executable on the computing hardware, the operating system being adapted to facilitate launching of objects in the computer system; an event monitoring module executable on the computing hardware and operatively coupled with the operating system, the event monitoring module configured to detect events occurring on the computer system including an event representing launching of a first object; a launch registration module executable on the computing hardware and operatively coupled with the event monitoring module, the launch registration module configured to store an association of a detected launching of the first object with user input effecting that launching, if any; a comparison module operatively coupled with the event monitoring module and the launch registration module, the comparison module configured to, determine, in response to a launching of the first object, whether an association exists between the launching, and any user input initiating that launching; and wherein the comparison module is further adapted to maintain a risk assessment record for the first object such that: in response to the launching of the first object being associated with user input initiating that launching, the risk assessment record is updated to reduce an indicated risk level for the first object; and in response to the launching of the first object not being associated with any user input initiating that launching, the risk assessment record is updated to increase the indicated risk level for the first object.