| CPC G06F 21/566 (2013.01) [G06F 21/564 (2013.01); G06F 21/577 (2013.01)] | 17 Claims |
|
7. A non-transitory computer-readable storage medium comprising instructions that when executed cause a processor of an electronic device to:
in response to detecting a malware scan trigger associated with a file having metadata including a first type of metadata and a second type of metadata, determine a first metadata risk score based on the first type of metadata and a second metadata risk score based on the second type of metadata, wherein the first metadata risk score is determined based on acquisition information of the file, and wherein the second metadata risk score is determined based on a security parameter of the file;
determine a combined risk score based on the first metadata risk score and the second metadata risk score;
determine a scan priority associated with the file based on the combined risk score and the metadata of the file;
determine a scan depth and a number of scans based on the scan priority; and
perform a set of malware scans on the file based on the scan depth and the number of scans.
|