首页> 外国专利> NETWORK SERVICE FOR THE DETECTION, ANALYSIS AND QUARANTINE OF MALICIOUS AND UNWANTED FILES

NETWORK SERVICE FOR THE DETECTION, ANALYSIS AND QUARANTINE OF MALICIOUS AND UNWANTED FILES

机译:网络服务,用于恶意文件和恶意文件的检测,分析和检疫

摘要

A system is provided for detecting, analyzing and quarantining unwanted files in a network environment. A host agent residing on a computing device in the network environment detects a new file introduced to the computing device and sends the new file to a network service for analysis. The network service is accessible to computing devices in the network environment. An architecture for the network service may include: a request dispatcher configured to receive a candidate file for inspection from a given computing device in the network environment and distribute the candidate file to one or more of a plurality of detection engines, where the detection engines operate in parallel to analyze the candidate file and output a report regarding the candidate file; and a result aggregator configured to receive reports from each of the detection engines regarding the candidate file and aggregates the reports in accordance with an aggregation algorithm.
机译:提供了一种用于在网络环境中检测,分析和隔离不需要的文件的系统。驻留在网络环境中的计算设备上的主机代理检测引入到计算设备的新文件,并将该新文件发送到网络服务以进行分析。网络服务可被网络环境中的计算设备访问。该网络服务的体系结构可以包括:请求分配器,配置为从网络环境中的给定计算设备接收要检查的候选文件,并将该候选文件分发给多个检测引擎中的一个或多个,其中检测引擎进行操作。并行地分析候选文件并输出有关候选文件的报告;结果聚合器,配置为从每个检测引擎接收有关候选文件的报告,并根据聚合算法聚合报告。

著录项

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号