Systems and methods for applying security updates to endpoint devices

A computer-implemented system for applying security updates to endpoint devices, the system comprising:

• a memory;
• a reputation module, stored in the memory, that calculates a reputation score for an endpoint device that indicates a security state of the endpoint device;
• a request module, stored in the memory, that:
• determines, based at least in part on the reputation score of the endpoint device, an appropriate frequency with which to request security updates for the endpoint device, wherein:
• high frequencies are appropriate for reputation scores indicative of poor security states;
• and
• low frequencies are appropriate for reputation scores indicative of healthy security states;
• and
• determines, based at least in part on the reputation score of the endpoint device, an appropriate position for the endpoint device within an update-distribution queue maintained by a security server that provides security updates, wherein:
• positions near the front of the update-distribution queue are appropriate for the reputation scores indicative of poor security states;
• and
• positions near the end of the update-distribution queue are appropriate for the reputation scores indicative of healthy security states;
• transmits, from the endpoint device to the security server, a request for the security server to:
• send the security updates to the endpoint device with the appropriate frequency;
• and
• place the endpoint device at the appropriate position within the update-distribution queue;
• an update module, stored in the memory, that:
• receives the security updates from the security server in accordance with at least one of:
• the appropriate frequency;
• and
• the appropriate position within the update-distribution queue;
• and
• applies the security updates within the endpoint device;
• and
• at least one hardware processor that executes the reputation module, the request module, and the update module.

A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• calculate a reputation score for an endpoint device that indicates a security state of the endpoint device;
• determine, based at least in part on the reputation score of the endpoint device, an appropriate frequency with which to request security updates for the endpoint device, wherein:
• high frequencies are appropriate for reputation scores indicative of poor security states;
• and
• low frequencies are appropriate for reputation scores indicative of healthy security states;
• determine, based at least in part on the reputation score of the endpoint device, an appropriate position for the endpoint device within an update-distribution queue maintained by a security server that provides security updates, wherein:
• positions near the front of the update-distribution queue are appropriate for the reputation scores indicative of poor security states;
• and
• positions near the end of the update-distribution queue are appropriate for the reputation scores indicative of healthy security states;
• transmit, from the endpoint device to the security server, a request for the security server to:
• send the security updates to the endpoint device with the appropriate frequency;
• and
• place the endpoint device at the appropriate position within the update-distribution queue;
• receive the security updates from the security server in accordance with at least one of:
• the appropriate frequency;
• and
• the appropriate position within the update-distribution queue;
• and
• apply the security updates within the endpoint device.