Modeling goodware characteristics to reduce false positive malware signatures
US8028338B1 · kind B1 · utility
314Cited by
2References
17Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Sep 30, 2008 |
| Grant date | Sep 27, 2011 |
| Priority date | — |
| Expiry date | Jan 2, 2030 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/2145
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A set of likelihood values associated with a set of characteristics associated with the set of goodware entities is determined. The set of characteristics is stored in association with the set of likelihood values as a model. A set of relative information gain values associated with the characteristics of the set of characteristics is generated. One or more characteristics are removed from the model responsive to the relative information gain values associated with the one or more characteristics to produce a revised model.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.