SYSTEMS AND METHODS FOR USING A REPUTATION INDICATOR TO FACILITATE MALWARE SCANNING Russian patent published in 2018 - IPC G06F21/50 G06F21/56 

FIELD: data processing.

SUBSTANCE: invention relates to the protection of a computer system from malicious programs. Client system contains a hardware processor configured to run the malware protection engine, configured to monitor the target process for malicious activity, the target process contains instances of the main executable module and the shared library; receiving from the server the first indicator of the reputation of the module of the main executable module and the second indicator of the reputation of the common library module, the first and second reputation indicators of the module contain respectively the first and second sets of monitoring rules; determining whether the target process is probably malicious, in accordance with the first and second indicators of the reputation of the module, and if the target process is probably not harmful, combining the first and second set of monitoring rules into a combined set of monitoring rules; and configuring the malware protection engine to monitor the target process in accordance with a combined set of monitoring rules.

EFFECT: technical result is to provide a fast, reliable and customizable solution to protect against malicious programs.

29 cl, 21 dwg, 2 tbl