US 11,082,446 B1 · Malware infection prediction and prevention

Abstract

A malware infection prediction method predicts a likelihood that a client device is to be infected with in a period of time based on state and behavior telemetry data. A malware infection prediction system receives telemetry data associated with use (i.e. behavior data) and configuration (i.e. state data) of a client device. By using a trained model, the system predicts a likelihood of the client device becoming infected within a given time frame. Based on the predicted likelihood, the system generates recommendations including recommended actions for reducing the likelihood of the client device becoming infected. The system then generates notifications including the recommendations and sends the notifications to the client device or to an administrative account associated with the client device.

Claims17

Dependent claims

A method for preventing malware infection comprising:

receiving, at a server, telemetry data associated with use and configuration of a client device;
predicting a likelihood of the client device becoming infected within a given time frame by applying a trained model to the telemetry data;
generating, based on the likelihood of the client device becoming infected, one or more recommendations including recommended actions for reducing the likelihood of the client device becoming infected;
generating one or more notifications including the recommendations;
sending the notifications to the client device;
detecting an infection result indicating whether or not the client device became infected within the given time frame;
retraining the trained model based on the telemetry data and the infection result;
and
storing the retrained model for future predictions.

6 more elements

Dependencies are inferred from the claim text.

Malware infection prediction and prevention

Life of this patent

Malware infection prediction and prevention

Life of this patent

Abstract

Claims17