Cloud-based gateway security scanning

摘要

Some embodiments of cloud-based gateway security scanning have been presented. In one embodiment, some data packets are received sequentially at a gateway device. The data packets constitute at least a part of a file being addressed to a client machine coupled to the gateway device. The gateway device forwards an identification of the file to a remote datacenter in parallel with forwarding the data packets to the client machine. The datacenter performs signature matching on the identification and returns a result of the signature matching to the gateway device. The gateway device determining whether to block the file from the client machine based on the result of the signature matching from the datacenter.

主权项

1. A system for security scanning, the system comprising:
memory used to store security-related information, wherein the stored security-related information includes signatures indicative of previously screened content; a user interface that:
receives a request for a content file over a communication network from a user device, andbegins transmission of the requested content file to the user device, wherein less than all of the data packets associated with the requested content file has been transmitted to the user device; and a processor that executes instructions to:
generate identification for the requested content file using the transmitted data packets associated with the requested content file, wherein the identification corresponds to the less than all of the data packets currently being transmitted, and wherein the identification is a partial hash,perform security screening of the requested content file using the generated identification, wherein the security screening includes performing content rating of the requested content file based on the generated identification, anddetermine a status for transmission of the requested content file to the user device based on the security screening and the stored security-related information.