Timothy J Fraser

US Patent:

20120317644, Dec 13, 2012

Filed:

Jun 9, 2011

Appl. No.:

13/156726

Inventors:

Ajith Kumar - Seattle WA, US
Timothy Jon Fraser - Bethesda MD, US
Adrian M. Marinescu - Sammamish WA, US
Marc E. Seinfeld - Fort Lauderdale FL, US
Anil Francis Thomas - Redmond WA, US

Assignee:

MICROSOFT CORPORATION - Redmond WA

International Classification:

G06F 21/00

US Classification:

726 24

Abstract:

The subject disclosure is directed towards a technology by which antimalware detection logic is maintained and operated at a backend service, with which a customer frontend machine communicates (queries) for purposes of malware detection. In this way, some antimalware techniques are maintained at the backend service rather than revealed to antimalware authors. The backend antimalware detection logic may be based upon feature selection, and may be updated rapidly, in a manner that is faster than malware authors can track. Noise may be added to the results to make it difficult for malware authors to deduce the logic behind the results. The backend may return results indicating malware or not malware, or return inconclusive results. The backend service may also detect probing-related queries that are part of an attempt to deduce the unrevealed antimalware detection logic, with noisy results returned in response and/or other actions taken to foil the attempt.