发明名称 System and method for preventing spread of malware in peer-to-peer network
摘要 Disclosed are systems, methods and computer program products for detecting and preventing spread of malware in a peer-to-peer (P2P) network. The system includes a P2P server receiving from a peer client computer a request for a metadata object and determining if the requested metadata object is associated with one of a verified clean data object, a verified malicious data, or an unverified data object. If the requested metadata object is associated with a verified clean data object, transmitting the requested metadata object to the peer client computer. If the requested metadata object is associated with an unverified data object, determining if the peer client computer has an antivirus software for testing the unverified data object for malware. If the peer client computer has an antivirus software, transmitting to the peer client computer the requested metadata object, otherwise denying client' request.
申请公布号 US9154517(B2) 申请公布日期 2015.10.06
申请号 US201213527651 申请日期 2012.06.20
申请人 AO Kaspersky Lab 发明人 Gostev Alexander A.;Nikishin Andrey V.;Soumenkov Igor I.;Rybalko Roman V.
分类号 G06F11/30;H04L29/06;H04L29/08 主分类号 G06F11/30
代理机构 Arent Fox LLP 代理人 Arent Fox LLP ;Fainberg Michael
主权项 1. A computer-implemented method for preventing spread of malware in a peer-to-peer (P2P) network, the method comprising: maintaining, by a server, a database of verified clean metadata objects, a database of verified malicious metadata objects, and a database of unverified metadata objects; receiving, by the server, from a peer client computer on the P2P network a request for a metadata object, containing information about an associated data object; checking, by a hardware processor of the server, if the requested metadata object is found in one of the database of verified clean metadata objects, the database of verified malicious metadata objects and the database of unverified metadata objects; if the requested metadata object is found in the database of verified clean data objects, transmitting, by the server, the requested metadata object to the peer client computer; if the requested metadata object is found in the database of unverified data objects, determining, by the hardware processor, if the peer client computer has an antivirus software for testing the unverified data object for malware when the data object is downloaded from the P2P network; if the peer client computer has an antivirus software, transmitting, by the server, to the peer client computer the requested metadata object; and if the peer client computer does not have an antivirus software, denying the request to provide the metadata object to the peer client computer.
地址 Moscow RU
您可能感兴趣的专利