SYSTEM AND METHOD FOR CATEGORIZING APPLICATION ON COMPUTING DEVICE Russian patent published in 2021 - IPC G06F21/50 

FIELD: computer technology.

SUBSTANCE: invention relates to the field of computer technology for detecting malicious applications on computing devices using a remote server. The technical result is achieved due to the method of categorizing the application on the computing device, according to which: a set of features of the application present on the computing device is collected using a security tool functioning on the computing device, for subsequent transmission to the security server; the application is classified using the classification service that operates on the security server, based on the collected set of features, where the classification result is obtained using a pre-trained classifying expert system in the form of the probability of the application belonging to the application categories; the relevance of the classification results is determined using a reputation service that provides the results of the classification of previously classified applications, and the relevance rules based on the classification results; the application category is determined with the help of a security tool using heuristic rules to determine the application category based on the current classification results.

EFFECT: reduced number of errors of the first and second kind when determining the application category.

6 cl, 4 dwg