HERD BASED SCAN AVOIDANCE SYSTEM IN A NETWORK ENVIRONMENT

摘要

A method in one example embodiment includes generating a signature for an object in a compute node in a network, searching a memory element for the signature, and responsive to determining the memory element does not contain the signature, scanning the object. The method also includes updating the memory element with a scan result, and synchronizing the memory element of the compute node with one or more memory elements of one or more other compute nodes in the network. In specific embodiments, the scan result includes the signature of the object and a threat level of the object. In further embodiments, the synchronizing includes sending the scan result to one or more other compute nodes in the network. In more specific embodiments, the scan result is sent with one or more other scan results after a predetermined interval of time from a previous synchronization.

主权项

1. A method comprising:
generating a signature for an object in a compute node in a network; searching a memory element for the signature; responsive to determining the memory element does not contain the signature, scanning the object; updating the memory element with a scan result; and synchronizing the memory element of the compute node with one or more memory elements of one or more other compute nodes in the network.