Patent Document ID: 20150172303
Application ID: 14107605
Patent Status: 0

Claim One:
1. A system for malware file detection and identification, comprising: (A) one or more databases containing a multitude of tags, each tag associated with at least one of (i) one or more known malicious files and (ii) one or more known benign files, the tags including, a tag identification code, a tag type corresponding to the type of information held by the tag, and a tag value corresponding to the value of the information held by the tag, the one or more databases including a many-to-many relational structure relating each known benign file to the plurality of tags respectively associated with that known benign file, and relating each known malicious file with the plurality of tags respectively associated with that known malicious file; and (B) at least one computer, having access to the database, and being programmed to perform the steps of: receiving a file, analyzing the file to generate a plurality of tags associated with the received file, comparing the tags generated from the received file with the tags in the one or more databases to identify tags in the database that match tags generated from the received file, and calculating a tag score for a tag generated from the received file based upon the number of malicious files associated with a matching tag from the database and the number of benign files associated with the matching tag from the database.