| 主权项 |
1. An electronic device for detecting a malware attack and controlling a display of information associated with a migration of suspicious network content during the malware attack, the electronic device comprising:
a processor; a communication interface logic communicatively coupled to the processor; and a storage device communicatively coupled to the processor, the storage device comprises
aggregation logic that, when processed by the processor, receives analytic data from each of a plurality of systems via the communication interface logic, the analytic data from each system of the plurality of systems comprises one or more input attributes being information used in routing of the suspicious network content over a network and one or more analysis attributes being (a) a portion of the suspicious network content or (b) at least one anomalous behavior observed during prior analysis of the portion of the suspicious network content,correlation logic that, when processed by the processor and responsive to receiving the analytic data from each of the plurality of systems, attempts to find relationships between the one or more analysis attributes provided from each system of the plurality of systems based on determined similarities between the one or more analysis attributes,consolidation logic that, when processed by the processor, consolidates input attributes of the one or more input attributes associated with at least (i) a first analysis attribute of the one or more analysis attributes from a first system of the plurality of systems and (ii) a second analysis attribute of the one or more analysis attributes from a second system of the plurality of systems in response to detected similarities between the first analysis attribute and the second analysis attribute, anddisplay logic that, when processed by the processor, generates display information including the consolidated input attributes. |
