Patent ID: 8626675

Claim:
A computer-implemented method for user-specific tuning of classification heuristics, at least a portion of the method being performed by an end user's computing device comprising at least one processor, the method comprising: identifying a classification heuristic deployed on the end user's computing device, wherein the classification heuristic is designed to analyze software components for malware; identifying a confidence score associated with the classification heuristic; tuning the classification heuristic for the end user post-deployment by: identifying a trusted software component on the end user's computing device that has been excluded from being analyzed for malware by the classification heuristic due to the trusted software component's trusted status; causing the classification heuristic to perform a malware analysis on the trusted software component; after the classification heuristic has performed the malware analysis on the trusted software component, determining that the classification heuristic incorrectly classified the trusted software component as untrustworthy; in response to determining that the classification heuristic incorrectly classified the trusted software component as untrustworthy, lowering the confidence score associated with the classification heuristic.