Applying antimalware logic without revealing the antimalware logic to adversaries

摘要: The subject disclosure is directed towards a technology by which antimalware detection logic maintained and operated at backend service, with customer frontend machine communicates (queries) for purposes of malware detection. In this way, some techniques are the service rather than revealed to authors. may be based upon feature selection, updated rapidly, in manner that faster authors can track. Noise added results make it difficult deduce behind results. return indicating or not malware, inconclusive also detect probing-related queries part an attempt unrevealed logic, noisy returned response and/or other actions taken foil attempt.