Server based malware screening

摘要

An Internet infrastructure is provided to transfer a packet of data between a client device and source device. The infrastructure consists of a support server that screens the packet for malware codes on behalf of a registered client. In order to scan for malware, the support server contains hardware and/or software modules to perform malware detection and quarantine functions. The modules identify malware bit sequence in the packet(s), malware bit sequences or entire contaminated code is quarantined or repaired as appropriate. After identification of malware code (if any), the support server sends warning messages to affected parties, providing information regarding the malware codes that were detected.

主权项

1. A method used by malware support server system in a network that includes a plurality of client devices and a plurality of host servers, the malware support server system having a network address, the method comprising:
receiving a first portion of a plurality of data packets, each of the plurality of data packets having the network address as a destination address, and each of the plurality of data packets including both an intended destination address and a source address; determining, while engaged in receiving at least some of the plurality of data packets, that the first portion is malware-free; upon determining that the first portion is malware-free, swapping the network address with the intended destination address in the first portion to create a modified first portion of the plurality of data packets; sending the modified first portion; receiving a second portion of plurality of data packets; determining, while engaged in receiving at least some of the plurality of data packets, that the second portion is not malware-free; and at least assisting in terminating delivery of the plurality of data packets.