PROVIDING PREVALENCE INFORMATION USING QUERY DATA

摘要

In one example, a data security system may determine prevalence of a file based query data for an object (e.g., a file or a hash or a file). An example algorithm may provide using a statistically justifiable estimate of the prevalence while storing few data records, and therefore may provide prevalence information in O(1) time complexity (i.e., constant time). Such an algorithm may be applied in near real-time to provide, e.g., an immediate response to a query for the prevalence of a file.

主权项

1. A machine readable non-transitory storage medium having instructions stored thereon for providing prevalence information based on a query, wherein the instructions when executed by at least one processors cause the at least one processors to perform the following operations:
retrieving a sequence of target values from a data source; receiving query data from a communication device; generating a sequence of query values based on an identifier associated with the communication device; comparing the sequence of query values and the sequence of target values to identify a number of matching values; and outputting to the communication device a prevalence value for the query data based, at least in part, on the number of matching values.