DETERMINING A REPUTATION FOR A PROCESS

摘要

Particular embodiments described herein provide for an electronic device that can be configured to identify a process running on the electronic device, assign a reputation to the process if the process has a known reputation, determine if the process includes executable code, determine a reputation for the executable code, and combine the reputation for the executable code with the reputation assigned to the process to create a new reputation for the process.

主权项

1. At least one computer-readable medium comprising one or more instructions that when executed by at least one processor, cause the processor to:
identify a process, wherein the process includes executable code; assign a reputation to the process if the process has a known reputation; determine a reputation for the executable code; and combine the reputation for the executable code with the reputation assigned to the process to create a new reputation for the process.