APIs for obtaining device-specific behavior classifier models from the cloud

摘要

The various aspects provide a system and methods implemented on the system for generating a behavior model on a server that includes features specific to a mobile computing device and the device's current state/configuration. In the various aspects, the mobile computing device may send information identifying itself, its features, and its current state to the server. In response, the server may generate a device-specific lean classifier model for the mobile computing device based on the device's information and state and may send the device-specific lean classifier model to the device for use in detecting malicious behavior. The various aspects may enhance overall security and performance on the mobile computing device by leveraging the superior computing power and resources of the server to generate a device-specific lean classifier model that enables the device to monitor features that are actually present on the device for malicious behavior.

主权项

1. A method of generating a lean classifier model on a server for use by a mobile computing device in monitoring for malicious behaviors, comprising:
receiving, on the server, information from the mobile computing device identifying at least one capability and a state of the mobile computing device; obtaining a cloud data set of information collected from a plurality of other mobile computing devices; generating, on the server, a lean classifier model specific to the mobile computing device, wherein generating the mobile computing device-specific lean classifier model comprises filtering the cloud data set of information based on the at least one capability and the state of the mobile computing device; and sending, from the server to the mobile computing device, the mobile computing device-specific lean classifier model, wherein the mobile device-specific lean classifier model comprises a processor-executable information structure configured to enable a system reliability module on the mobile computing device to classify behavior of the mobile computing device, wherein classifying behavior comprises analyzing features specific to the at least one capability and the state of the mobile computing device.