APPARATUS AND METHOD FOR REAL-TIME NETWORK ANTIVIRUS

摘要

Disclosed are a real-time network antivirus operation performing apparatus which performs a real-time antivirus test on a transmitted file in a protection target network and blocks malicious file traffic at a high speed on the network, and a method thereof. The real-time network antivirus operation performing apparatus includes: a packet processing unit for parsing an input packet to output transmission data stream; a packet checksum calculation unit for calculating a checksum of the transmission data stream for each packet, and outputting a signature included in the transmission data stream if the last packet of the transmission data stream is input; a high-speed virus scanning unit for scanning viruses based on the signature; a detecting and blocking unit for blocking the input packet or transmitting the input packet to a destination based on a result of the high-speed virus scanning unit; and a caching unit for updating a blocking list based on a result of the detecting and blocking unit.