Data management of potentially malicious content

摘要

In a data management system, examination of first data for malicious content by a malicious content scanner is initiated in response to a request to write first data to a data storage device. In response to the examination revealing no malicious content in the first data, the first data, a first signature representative of a version of the malicious content scanner at a time of the examination of the first data, and second data linking the first signature to the first data as read-only data are written to the data storage device.

主权项

1. A data management method, comprising:
in response to a request to write first data to a data storage device, initiating examination of the first data for malicious content by a malicious content scanner; in response to the examination revealing no malicious content in the first data, writing to the data storage device, as read-only data, the first data, a first signature representative of a version of the malicious content scanner at examination of the first data, and second data linking the first signature to the first data; in response to a request to read the first data from the data storage device, retrieving the first data and the first signature from read-only storage in the data storage device; determining a current version of the signature of the malicious content scanner at the retrieving; and initiating examination of the first data for malicious content by the malicious content scanner in response to the current version of the signature not matching the retrieved first signature.