| CPC G06F 11/3698 (2025.01) [G06F 21/53 (2013.01); G06F 2221/033 (2013.01)] | 16 Claims |

|
1. A computer-implemented method for grayware analysis, comprising:
mapping a set of grayware activity descriptions to grayware categories using linguistic vector analysis;
running a software application in a sandbox;
collecting activity information from the software application that represents actions performed by the software application within an environment of the sandbox;
matching the collected activity information to a grayware activity description to identify the software application as performing a grayware activity; and
performing a corrective action on the software application that is tailored to the grayware activity, to limit an impact of the grayware activity without stopping the software application from running otherwise.
|