Information security – Monitoring or scanning of software or data including attack... – Intrusion detection
Reexamination Certificate
2005-10-19
2009-11-17
Moazzami, Nasser G (Department: 2436)
Information security
Monitoring or scanning of software or data including attack...
Intrusion detection
Reexamination Certificate
active
07620991
ABSTRACT:
A system and method is provided for reliably detecting the file type of a client-requested and by-passing conventional ICAP processing if the detected file type corresponds to a non-viral file. The client-requested file is examined to determine whether it contains a predefined byte pattern (or “file signature”) corresponding to a non-viral type. The signature may be embodied as one or more predetermined “magic bytes” located at known offsets. For instance, the client-requested may be identified as a particular type of image file if it contains the set of magic bytes associated with that image format. Unlike prior implementations, when the client-requested file is determined to contain magic bytes corresponding to a non-viral file type, such as an image file, the file is returned to the requesting client without performing conventional ICAP virus-scanning operations.
REFERENCES:
patent: 6173291 (2001-01-01), Jenevein
patent: 6983296 (2006-01-01), Muhlestein et al.
“Internet Content Adaptation Protocol (ICAP), Network Appliance, Version 1.01.” Jul. 30, 2001. Available at http://www.icap-forum.org/documents/specification/icap—whitepaper—v1-01.pdf. Downloaded Mar. 6, 2009.
M. Muhlestein and Wesley R. Witte, United States Patent Application for a “System and Method for Tracking Modified Files in a File System” With U.S. Appl. No. 10/217,119, filed Aug. 12, 2002.
Freed and N. Borenstein, “Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies” RFC 2045, Nov. 1996.
J. Elson and A. Cerpa, “Internet Content Adaptation Protocol (ICAP)”, RFC 3507, Apr. 2003.
Martin John
Taneja Manik
Cesari and McKenna LLP
Moazzami Nasser G
NetApp, Inc.
Pogmore Travis
LandOfFree
Optimized network cache for virus scanning by examining the... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Optimized network cache for virus scanning by examining the..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Optimized network cache for virus scanning by examining the... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-4059384