Patent ID: 8910284

Claim:
A non-transitory computer-readable medium storing an intrusion application executable by a client device, the intrusion application comprising: code that receives an indication from security software that malware has been detected in the client device; code that, in response to receiving the indication, obtains a browser history for a browser executed by the client device; code that encodes for display at least one user interface that facilitates a user reporting that the malware has been detected to a remote device; code that, in response to receiving a request from the user to report that the malware has been detected, sends the browser history to the remote device, the remote device configured to compare the browser history with an additional browser history obtained from an additional client device to determine whether a network page identifier is represented in the browser history and the additional browser history; code that receives data indicating that a network page associated with the network page identifier is a source of the malware; and code that encodes for display a notification for the user that the network page is the source of the malware.