METHOD AND SYSTEM OF DECENTRALIZED IDENTIFICATION OF MALWARE PROGRAMS Russian patent published in 2019 - IPC G06F21/56 

FIELD: calculating; counting.

SUBSTANCE: invention relates to methods for decentralized malware inspection. Technical result is achieved through a decentralized malware scan performed on a computer device that has access to a distributed registry of malware and a transaction pool implemented on the basis of a peer-to-peer network, including: receiving input data; malware scan for malware; introduction of scan parameters and at least one malware check result to the transaction pool; obtaining from a variety of computer devices a peer-to-peer network, each of which has its own reputation, the results of a distributed scan of the specified malicious program; determination of the parameter of harmfulness on the basis of the obtained results of a distributed test, at least depending on the reputation of computer devices of the peering network; identification of the malicious program in response to the fact that a certain parameter of the maliciousness of the malicious program exceeds a predetermined threshold value; storing the identified malware and associated data in a distributed registry of malware.

EFFECT: technical result consists in increasing the accuracy and reliability of identifying malware.

39 cl, 2 dwg