Patent ID: 8516446

Claim:
A method executed by one or more computers, the method comprising: creating a plurality of lists of second symbols automatically, the plurality of lists of second symbols including a list of published symbols, and a list of deprecated symbols where access is permitted for a limited amount of time, wherein creating the plurality of lists of second symbols includes determining a frequency of use of a first symbol scanned from a plurality of previously submitted binary application programs; determining whether the frequency of the use of the first symbol satisfies a usage threshold, wherein if the usage threshold is satisfied: moving the first symbol from the list of deprecated symbols to the list of published symbols by removing the first symbol from the list of deprecated symbols and adding the first symbol to the list of published symbols; scanning a binary application program for scanned first symbols; comparing the scanned first symbols with the plurality of lists of second symbols, each list of second symbols corresponding to an access privilege of the second symbols in the list of second symbols granted to the binary application program; and classifying the binary application program at least in part based on the comparing, where comparing the scanned first symbols with the plurality of lists of second symbols includes calculating a likelihood that the scanned first symbols match one of the lists of second symbols.