Benign file list generation

Abstract

Exception lists may be generated by combing a standard list and a client list. Standard benign file information identifying a set of standard benign files may be obtained. A set of standard signatures for the set of standard benign files may be obtained. Client benign file information identifying a set of client benign files for a client may be obtained. A set of client signatures for the set of client benign files for the client may be obtained. A client exception list for the client may be generated based on the set of standard signatures and the set of client signatures.

Description

[0001] related application [0002] This application claims the benefit of priority to U.S. Nonprovisional Application No. 16 / 221,799, entitled "Benign File List Generation," filed December 17, 2018, the contents of which are incorporated by reference Incorporated herein in its entirety. technical field [0003] The present disclosure generally relates to generating a list of benign files. Background technique [0004] Two goals of malware detection software are to have a high detection rate for actual malware and to have a low false positive rate. False positives occur when a benign file is considered malware. Malware detection is usually done using a single stage approach. When using a single-stage approach, these two goals are at odds with each other, because adjusting detection to increase one rate causes the other rate to increase as well. By using a hybrid two-stage approach, the false positive rate can be reduced while maintaining the actual detection rate. Con...

AI Technical Summary

Problems solved by technology

When using a single-stage approach, these two goals are at odds with each other, since adjusting the detection to increase one ratio causes the other to also increase

Images