Security Policy Deployment and Enforcement System for the Detection and Control of Polymorphic and Targeted Malware

摘要

The present system and method pertain to the detection of malicious software and processes such as malware. A cloud security policy system receives hashes and behavioral information about applications and/or processes executing on user devices. The cloud security policy system records this information and then evaluates the trustworthiness of the hashes based on the information received from the user devices to provide a security policy for the applications and/or processes. The security policy is sent from the cloud security policy system to user devices to be applied by the user devices.

主权项

1. A method for providing security policies, the method comprising:
receiving behavioral information about applications executing on user devices; searching databases of known applications and utilizing crowdsourcing to identify the applications executing on the user devices; determining trustworthiness for each of the identified applications based on the behavioral information received from each of the user devices; and providing security policies for the applications to the user devices based on the determined trustworthiness.