Systems and methods for creating customized confidence bands for use in malware detection

Abstract

A computer-implemented method for creating customized confidence bands for use in malware detection may include 1) identifying a portal for receiving executable content, 2) identifying metadata relating to the portal, 3) analyzing the metadata to determine what risk executable content received via the portal poses, and then 4) creating, based on the analysis, a confidence band to apply during at least one disposition of executable content received via the portal. Various other methods, systems, and computer-readable media are also disclosed.

Description

Background technique [0001] Consumers and businesses face a growing trend of malware that threatens the stability and performance of their computers and the security of their data. Computer programmers with malicious motives have created and continue to create viruses, Trojan horses, worms, and other programs (collectively "malware") in an attempt to harm computer systems. To evade detection, malicious programmers can inject malware into or between legitimate programs. [0002] Many security software companies try to combat malware by routinely creating and configuring malware signatures (eg, hash functions that uniquely identify malware) for their customers. However, a large amount of malware remains unidentified and therefore undetectable using traditional signature-based malware detection mechanisms, especially since malware authors regularly modify their malware in an attempt to bypass commonly used signature-based malware detection mechanisms. malware detection mechanis...

AI Technical Summary

Problems solved by technology

Unfortunately, heuristic-based classification methods can lead to an unacceptable number of false positives and / or missed positives

Images