Back to results
US 9,003,314 B2Granted
System, method, and computer program product for detecting unwanted data based on an analysis of an icon
AssigneeMcAfee, Inc.
InventorsAlexander James Hinchliffe, Oliver Georges Devane, Lee Codel Lawson Tarbotton
Life of this patent
Estimating the term…
Abstract
A system, method, and computer program product are provided for detecting unwanted data based on an analysis of an icon. In use, an icon is analyzed. Furthermore, unwanted data is detected based on the analysis.
Claims18
A non-transitory computer program storage device, with instructions stored thereon, comprising instructions that when executed cause one or more processors to:
- detect selection of an icon, the selection utilized to initiate execution of an application associated with the icon;
- analyze properties of the icon in response to the detection;
- compare the properties of the icon with a list of properties of known icons to identify a matching icon;
- determine that the application is malware, responsive to a determination that the application does not contain multiple icons;
- determine that the icon represents malware responsive to a determination that the icon matches an icon known not to represent malware and the determination that the application is malware.
2 more elements
A method, comprising:
- detecting, with a processor, selection of an icon, the selection utilized to initiate execution of an application associated with the icon;
- analyzing properties of the icon with the processor in response to the act of detecting;
- comparing, with the processor, the properties of the icon with a list of properties of known icons to identify a matching icon;
- determining that the application is malware, comprising:
- determining that the application does not contain multiple icons;
- and
- determining that the icon represents malware, comprising:
- determining that the icon matches an icon known not to represent malware and the determination that the application is malware.
5 more elements
A system comprising:
- a memory;
- and
- a hardware processor operatively coupled to the memory, the processor adapted to execute program code stored in the memory, comprising instructions that when executed cause the processor to:
- detect a selection of an icon, the selection utilized to initiate execution of an application associated with the icon,
- analyze properties of the icon in response to the detection,
- compare the properties of the icon with a list of properties of known icons to identify a matching icon,
- determine that the application is malware, responsive to a determination that the application does not contain multiple icons;
- and
- determine that the icon represents malware responsive to a determination that the icon matches an icon known not to represent malware and the determination that the application is malware.
6 more elements
Dependencies are inferred from the claim text.