Cyber vaccine and predictive-malware-defense methods and systems

A system for predictive malware defense, the system comprising:

• a processor;
• a memory in communication with the processor via a communication infrastructure and storing instructions that, when executed by the processor, cause the processor to:
• perform feature reduction training on a collection of events including benign and malicious events, producing a feature reducer;
• perform evolution pattern training, wherein a collection of malicious events has features extracted which are converted into signatures by the feature reducer, and wherein a family clusterer produces a collection of families from the signatures, producing an evolution pattern predictor operative to predict future signatures in a family;
• perform evolution pattern prediction, wherein a collection of malicious events has its features extracted, which are converted into signatures by the feature reducer, wherein the family clusterer produces a collection of families from the signatures, and wherein the evolution pattern predictor operates on the collection of families to produce future malicious event signatures;
• perform malicious event detection training, wherein a collection of benign and malicious events, with known labels, has its features extracted, which are converted into signatures by the feature reducer, wherein the signatures are combined with the future malicious event signatures, creating a training collection for an event classification trainer, wherein the event classification trainer learns a model to distinguish between training instances with benign and malicious labels, resulting in an event classifier that can classify a new event as benign or malicious;
• and
• perform event classification on a new set of events, wherein the new set of events has its features extracted, which are then converted into signatures by the feature reducer, and wherein the event classifier takes the signatures and produces a benign or malicious classification for an event within the new set of events.