Method and apparatus for managing an alert level for notifying a user as to threats to a computer

• US 8,566,947 B1
• Filed: 11/18/2008
• Issued: 10/22/2013
• Est. Priority Date: 11/18/2008
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Sankruthi, Anand
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US12/273,249
• Time in Patent Office: 1,799 Days
• Field of Search: 726 22- 25
• US Class Current: 726/25
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures

Abstract

A method and apparatus for managing alert level of the user computer is described. In one embodiment, the method for dynamically adjusting an alert level for notifying a user as to at least one threat to a computer includes applying heuristic information to environment data to identify vulnerability indicia regarding a computer, wherein the environment data comprises at least one usage statistic related to a user associated with the computer and determining an alert level based on the vulnerability indicia, wherein the user is notified of at least one threat to the computer in accordance with the alert level.

Claims

1. A method for dynamically adjusting an alert level for notifying a user as to at least one threat to a computer, comprising:

applying heuristic information to environment data to identify vulnerability indicia regarding a computer, wherein the environment data comprises at least one usage statistic related to a user associated with the computer;

determining an alert level based on the vulnerability indicia, wherein the alert level is configured to be dynamically adjusted in response to at least one instruction from a subscription service; and

notifying the user of at least one threat to the computer in accordance with the alert level.

2. The method of claim 1, wherein determining the alert level further comprises adjusting the alert level in response to a change to at least one of the environment data and the vulnerability indicia.

3. The method of claim 1, wherein the alert level defines a frequency for notifying the user of the at least one rate.

4. The method of claim 3, wherein determining the alert level further comprises adjusting the alert level in response to a determination that the at least one instruction from a subscription service has been received.

5. The method of claim 4, wherein processing the at least one instruction further comprises overriding the determined alert level in accordance with the at least one instruction.

6. The method of claim 1, wherein the alert level comprises at least one of a high alert level, a medium alert level and a low alert level.

7. The method of claim 1, wherein the vulnerability indicia comprises at least one of a number received SPAM emails, an outdated operating system and infrequently updated security software.

8. An apparatus for dynamically adjusting an alert level for notifying a user as to at least one threat to a computer, comprising:

security software for applying heuristic information to environment data to identify vulnerability indicia regarding a computer and determining an alert level based on the vulnerability indicia, wherein the alert level is configured to be dynamically adjusted in response to at least one instruction from a subscription service and wherein the environment data comprises at least one usage statistic related to a user associated with the computer.

9. The apparatus of claim 8 further comprising a notification module for alerting the user as to at least one threat to the computer in accordance with the alert level.

10. The apparatus of claim 8, wherein the security software adjusts the alert level in response to a change to at least one of the environment data and the vulnerability indicia.

11. The apparatus of claim 8, wherein the alert level defines a frequency for notifying the user of suspicious activity.

12. The apparatus of claim 8, wherein the security software adjusts the alert level in response to a determination that the at least one instruction from a subscription service has been received.

13. The apparatus of claim 12, wherein the subscription service overrides the alert level using the at least one instruction.

14. The apparatus of claim 8, wherein the alert level comprises at least one of a high alert level, a medium alert level and a low alert level.

15. The apparatus of claim 8, wherein the vulnerability indicia comprises at least one of a number received SPAM emails, an outdated operating system and infrequently updated security software.

16. A system for dynamically adjusting an alert level for notifying a user as to at least one threat to a computer, comprising:

a user computer, comprising;

security software for applying heuristic information to environment data to identify vulnerability indicia regarding the user computer and determining an alert level based on the vulnerability indicia, wherein the environment data comprises at least one usage statistic related to a user, and

a notification module for alerting the user as to at least one threat to the user computer in accordance with the alert level; and

a server coupled to the user computer comprising a subscription service for communicating at least one security package to the security software, wherein the at least one security package comprises at least one instruction, and wherein the alert level is configured to be dynamically adjusted in response to the at least one instruction from the subscription service.

17. The system of claim 16, wherein the security software adjusts the alert level in response to a change to at least one of the environment data and the vulnerability indicia.

18. The system of claim 16, wherein the alert level defines a frequency for notifying the user of suspicious activity.

19. The system of claim 16, wherein the security packages comprises at least one instruction for adjusting the alert level, wherein the alert level is dynamically adjusted in response to a determination that the at least one instruction is received.

20. The system of claim 16, wherein the subscription service overrides the alert level using the at least one security package.