System, method, and computer program product for making a scan decision during communication of data over a network

摘要

A system, method, and computer program product are provided for scanning data during communication of the data over a network. In use, a process is initiated for determining whether to scan data, during communication of the data over the network. Further, the data is conditionally scanned based on the determination.

主权项

1. At least one non-transitory computer readable medium having instructions stored thereon, the instructions when executed on a machine cause the machine to:
receive data associated with a communication of the data over a network; receive a hash of the data; during the communication of the data over the network:
determine whether the hash of the data matches a hash within a false negative database;determine whether the hash of the data matches a hash within an unwanted content database when it is determined that the hash of the data does not match a hash within the false negative database; anddetermine whether the hash of the data matches a hash within a clean database when it is determined that the hash of the data does not match a hash within the unwanted content database; when it is determined that the hash of the data does not match a hash of data within the clean database:
compute a hash of the data after the data is communicated;compare the computed hash with the received hash;scan the data for unwanted content if the received hash does not match the computed hash;update the unwanted content database with the computed hash if the data is determined to include unwanted content by the scanning; andupdate the clean database with the computed hash if the data is not determined to include unwanted content by the scanning.