METHOD OF SELECTIVE USE OF PATTERNS OF DANGEROUS PROGRAM BEHAVIOR Russian patent published in 2018 - IPC G06F21/56 

FIELD: information technology.

SUBSTANCE: invention relates to use of patterns of dangerous program behavior with a high level of false detections. Method of selective use of the pattern of dangerous programs behavior on computer systems, through which a pattern of dangerous behavior of programs is launched in a first mode on various computer systems, at which an antivirus application detects threats corresponding to the pattern, but does not perform actions for their elimination, statistics of threat detection are accumulated within a specified period of time, for each computer system, for which the number of false threats detected does not exceed a specified threshold value, introduction into the pattern of dangerous program behavior of all falsely detected threats is implemented, corresponding to a particular computer system as exceptions and the pattern of dangerous program behavior is switched into a second mode, which detects threats corresponding to the pattern, and performs actions to eliminate them.

EFFECT: reducing the number of false threat detections when using a pattern of dangerous program behavior.

6 cl, 3 dwg