Ex Parte Kelly et al - Page 2

                Appeal 2007-2020                                                                             
                Application 10/028,906                                                                       
                                             INTRODUCTION                                                    
                      The claims relate to techniques for controlling access to suspicious                   
                files; i.e., access to potential malware such as viruses and worms.                          
                (Specification 1:3-7.)  Claim 1 is illustrative:                                             
                1.  A computer program product for operating a computer to review                            
                files for potential malware, comprising:                                                     
                logging code operable to maintain a statistical log having an entry for                      
                each file sent to the computer for review, each entry being arranged to store                
                a count value indicating the number of times that the file has been sent to the              
                computer for review and a value of one or more predetermined attributes                      
                relating to the file;                                                                        
                weighting table code operable to maintain a weighting table                                  
                identifying, for each value of said one or more predetermined attributes, a                  
                weighting indicating the likelihood that a file having that value of said one                
                or more predetermined attributes will be malware;                                            
                statistical log interface code operable, upon receipt of a file, to                          
                determine with reference to the statistical log the count value relating to that             
                file;                                                                                        
                action determination code operable, if the count value determined by                         
                the statistical log interface code exceeds a predetermined threshold, to                     
                reference the weighting table to determine the weighting to be associated                    
                with the file, based on the value of said one or more predetermined attributes               
                associated with that file in the statistical log; and                                        
                action performing code operable to perform predetermined actions in                          
                relation to the file dependent on the weighting determined by said action                    
                determination code.                                                                          
                                                                                                            
                      The Examiner relies on the following prior art references to show                      
                unpatentability:                                                                             


                                                     2                                                       

Page:  Previous  1  2  3  4  5  6  7  8  9  Next

Last modified: September 9, 2013