Inventors:
Monty D. McDougal - St. Paul TX, US
Bradley T. Ford - Wylie TX, US
William P. Smelser - Draper UT, US
Jason R. Clinton - Highland UT, US
Morgan J. Greenwood - Saratoga Springs UT, US
Assignee:
Raytheon Company - Waltham MA
International Classification:
G06F 21/00
G06F 15/16
Abstract:
In certain embodiments, a computer system includes a memory unit and a processing unit. The processing unit executes a monitoring module stored on the computer system. The monitoring module monitors the computer system for addition of a file to the computer system and detects an addition of a file to the computer system. The monitoring module accesses policies to determine whether to communicate information associated with the detected addition of the file over a communication network to a remote malware analysis system to initiate a possible malware analysis of the file by the remote malware analysis system. The monitoring module initiates, in response to determining to communicate information associated with the detected addition of the file, communication over the communication network of information associated with the detected addition of the file to the remote malware analysis system, the remote malware analysis system operable to analyze the file for malware.
