Patent Document ID: 9503470
Application ID: 14043567
Patent Flag: 1

Claim One:
1. A system that detects the state of a computer network, comprising: a plurality of distributed agents disposed in said computer network, each said distributed agent including a microprocessor adapted to: passively collect, monitor, and aggregate data representative of activities of respective nodes within said computer network, analyze collected data to develop activity models representative of activities of said computer network in a normal state and activities of said computer network in an abnormal state as a result of intrusions, infections, scams, code emulating code or humans, and/or other suspicious activities in said computer network, and generate counter-offensive measures where unauthorized access to a program or file containing executable code results in the program or file disabling an operating system with all associated applications of a computer in the computer network until/unless the presumed attacker is able to prove to the machine owner/victim that the presumed attacker had been authorized to access the target data or machine provoking the said counter offensive measure; and a server that provides a security and validity score for free software available for download, the validity score comprising three components including a first component computed based on security of the free software itself, a second component computed based on experiences users have with the free software, and a third component based on a reputation of a programmer that created the free software.