Virus prediction system and method
View Patent ↗Methods and apparatus for predicting the incidence of a new virus a within a system based upon previous infections recorded within the system. According to one aspect of the present invention, a method for responding to a virus alert that provides information pertaining to a new virus includes obtaining the virus alert and assessing a risk level associated with the new virus. The risk level indicates the predicted likelihood that the first virus will cause significant damage in the event that the new virus infects the computer system. Finally, the method includes obtaining computer code such as a driver and/or a dat when the risk level indicates that the new virus may pose a significant risk to the computer system.
1. A computer-implemented method, comprising:
receiving a virus alert, the virus alert containing information pertaining to a new virus;
assessing a risk level associated with the new virus, the risk level indicating a risk of damage caused by an infection of the new virus on a computer system; and
obtaining a program code when the risk level indicates that the new virus may pose a risk of damage on the computer system, the program code being configured to combat the new virus;
wherein assessing the risk level associated with the new virus includes:
obtaining information associated with at least one previous virus which has caused a previous infection on the computer system; and
comparing the information pertaining to the new virus with the information associated with the previous virus which has previously caused the previous infection on the computer system;
wherein the previous virus and the new virus are of a first type, and the information associated with the previous virus which has caused the previous infection on the computer system includes data associated with at least one of a duration of the previous infection and a scope of the previous infection;
wherein if the information associated with the previous virus indicates that the previous infection did not have a prolonged duration and was not widespread, the risk level includes a low risk level.
2. The method as recited in claim 1 wherein when the previous infection has at least one of the prolonged duration and a particular scope, the risk level indicates that the new virus may pose the risk of damage on the computer system.
3. The method as recited in claim 1 wherein the information associated with the previous virus which has caused the previous infection on the computer system is stored in a profile on a database associated with the computer system.
4. The method as recited in claim 1 wherein the virus alert is received from an anti-virus information source.
5. The method as recited in claim 4 wherein the virus alert is automatically received from the anti-virus information source.
6. The method as recited in claim 5 wherein receiving the virus alert includes acquiring the virus alert from the anti-virus information source.
7. The method as recited in claim 1 wherein the computer system is a computer network, the computer network including a plurality of computing devices.
8. A computer program product, comprising:
computer code for receiving a virus alert, the virus alert containing information pertaining to a new virus;
computer code for assessing a risk level associated with the new virus, the risk level indicating a risk of a new infection by the new virus on a computer system;
computer code for obtaining program code when the risk level indicates that the new virus may pose a risk of the new infection on the computer system, the program code being configured to combat the new virus; and
a computer-readable storage medium that stores the computer codes;
wherein the computer code for assessing the risk level associated with the new virus includes:
computer code for obtaining information associated with at least one previous virus which has caused a previous infection on the computer system; and
computer code for comparing the information pertaining to the new virus with the information associated with the previous virus which has previously caused the previous infection on the computer system;
wherein the previous virus and the new virus are of a first type, and the information associated with the previous virus which has caused the previous infection on the computer system includes data associated with at least one of a duration of the previous infection and a scope of the previous infection;
wherein if the information associated with the previous virus indicates that the previous infection did not have a prolonged duration and was not widespread, the risk level includes a low risk level.
9. The computer program product as recited in claim 8 wherein the computer-readable medium is one selected from the group consisting of a hard disk, a CD-ROM, a DVD, a computer disk, a tape drive, and a computer memory.
10. A computer system, comprising:
computer code for receiving a virus alert, the virus alert containing information pertaining to a new virus;
computer code for assessing a risk level associated with the new virus, the risk level being arranged to indicate a risk of a infection by the new virus on the computer system;
computer code for obtaining code when the risk level indicates that the new virus may pose a risk of the infection on the computer system, the code being configured to combat the new virus;
a computer-readable medium that stores the computer codes; and
a processor that executes the computer codes;
wherein computer code for assessing the risk level associated with the new virus includes:
computer code for obtaining information associated with at least one previous virus which has caused a previous infection on the computer system; and
computer code for comparing the information pertaining to the new virus with the information associated with the previous virus which has previously caused the previous infection on the computer system;
wherein the previous virus and the new virus are of a first type, and the information associated with the previous virus which has caused the previous infection on the computer system includes data associated with at least one of a duration of the previous infection and a scope of the previous infection;
wherein if the information associated with the previous virus indicates that the previous infection did not have a prolonged duration and was not widespread, the risk level includes a low risk level.
11. The method as recited in claim 1 wherein if it is determined that the previous virus and the new virus are of different types based on the comparison, the risk level includes an unknown risk level.
12. A computer program product, comprising:
computer code for receiving a virus alert, the virus alert containing information pertaining to a new virus;
computer code for assessing a risk level associated with the new virus, the risk level indicating a risk of a new infection by the new virus on a computer system;
computer code for obtaining program code when the risk level indicates that the new virus may pose a risk of the new infection on the computer system, the program code being configured to combat the new virus; and
a computer-readable storage medium that stores the computer codes;
wherein the computer code for assessing the risk level associated with the new virus includes:
computer code for obtaining information associated with at least one previous virus which has caused a previous infection on the computer system; and
computer code for comparing the information pertaining to the new virus with the information associated with the previous virus which has previously caused the previous infection on the computer system;
wherein the previous virus and the new virus are of a first type, and the information associated with the previous virus which has caused the previous infection on the computer system includes data associated with at least one of a duration of the previous infection and a scope of the previous infection;
wherein if the information associated with the previous virus indicates that the previous infection had a prolonged duration and was not widespread, the risk level includes a medium risk level.