Patent Document ID: 8775333
Application ID: 12542999
Patent Status: 1

Claim One:
1. A computer-implemented method for generating a threat classifier to determine a malicious process, comprising: distributing a parameter collection module from a server to a plurality of client processing systems, wherein the parameter collection module comprises a set of rules to detect a certain behavior in the plurality of client processing systems; if one or more of the set of rules are satisfied, receiving at the server, from the plurality of client processing systems, input data indicative of a plurality of client processing parameters, wherein each client processing system responds automatically upon determining the one or more of the set of rules are satisfied; scaling the input data to provide a plurality of parameter vectors indicative of each of the plurality of client processing parameters; classifying each of the plurality of parameter vectors as a threat or a non-threat; performing, at the server, a machine learning process on at least one of the plurality of classified parameter vectors; generating the threat classifier from the machine learning process, wherein the threat classifier is configured to generate an output result, the output result comprising a single value generated for a single process; determining if the output result satisfies a certain threshold, wherein if the output result satisfies the threshold, classifying a process as a threat, and wherein if the output result does not satisfy the threshold, requesting additional input from a user; and transferring the threat classifier to at least one of the client processing systems, wherein the threat classifier is configured to automatically determine if a process to be performed in a client processing system is malicious.