1. A malware detection method in a data processing system for determining suspicious data based on data entropy, the method comprising the steps of: acquiring a block of data; calculating an entropy value for the block of data; comparing the entropy value to a threshold value; and recording the block of data as suspicious when the entropy value exceeds the threshold value.