Content extractor and analysis system

摘要

A security system provides a defense from known and unknown viruses, worms, spyware, hackers, and unwanted software. The system can implement centralized policies that allow an administrator to approve, block, quarantine, and log file activities. The system can extract content of interest from a file container, repackage the content of interest as another valid file type, perform hashes on the content of interest, associate the hash of the container with the hash of the repackaged content, transfer the repackaged content, and store the hash with other security-related information.

主权项

1. A computer-implemented method comprising:
receiving a first file by a computer; extracting content of interest within the first file, wherein said content of interest is less than the entire first file; wherein the content of interest includes one of an executable, script, archive, or installer; repackaging the content of interest into one or more files of valid formatted type to produce a first reduced file; applying a signature to the reduced file; and storing the signature and associating the signature with the first file.