Methods for providing malware protection for cloud storage and devices thereof
AssigneeCloud Storage Security
InventorsAaron C. Newman, Edward Casmer, David Dreyer
Life of this patent
Estimating the term…
Abstract
A method, non-transitory computer readable medium, and device that provides an externally deployable malware protection architecture comprising one or more anti-malware engines for malware inspection of one or more files within a cloud storage environment. The one of the files is tested to detect for any malware by an executing one of the anti-malware engines supported by one or more anti-malware libraries. At least one of a plurality of actions on the at least one file is executed when the test indicates the detection of malware in the at least one of the files.
Claims24
A method for providing malware protection for cloud storage, the method comprising:
- providing, by a computing device, an externally deployable malware protection architecture comprising anti-malware engines for malware inspection of one or more files within a cloud storage environment;
- testing, by the computing device, to detect when at least one of the files has any malware by executing one or more of the anti-malware engines supported by one or more anti-malware libraries, wherein the testing further comprises;
- monitoring, by the computing device, a number of messages in a queue related to the one or more files within a cloud storage environment with respect to two or more thresholds;
- and
- adjusting, by the computing device, how many of the anti-malware engines are executed to detect any malware based on the monitored the number of messages with respect to the two or more thresholds, wherein the adjusting adds one or more of the anti-malware engines when the monitored number of messages is above a first of the thresholds, stops one or more of the anti-malware engines when the monitored number of messages is below a second of the thresholds, and maintains the one or more anti-malware engines currently executing when the monitored number of messages is in a range of a number of monitored messages between the first and the second of the thresholds;
- and
- executing, by the computing device, at least one of a plurality of actions on the at least one file when the testing indicates the detection of malware in the at least one of the files.
A method for providing malware protection for cloud storage, the method comprising:
- providing, by a computing device, an externally deployable malware protection architecture comprising anti-malware engines for malware inspection of one or more files within a cloud storage environment;
- testing, by the computing device, to detect when at least one of the files has any malware by executing one or more of the anti-malware engines supported by one or more anti-malware libraries, wherein the testing further comprises;
- monitoring, by the computing device, a number of messages in a queue related to the one or more files within a cloud storage environment with respect to one or more thresholds;
- and
- adjusting, by the computing device, how many of the anti-malware engines are executed to detect any malware based on the monitored the number of messages with respect to the one or more thresholds;
- and
- wherein the monitoring and the adjusting further comprises:
- determining, by the computing device, when the number of messages in the queue related to the one or more files within the cloud storage environment exceeds a first of the thresholds;
- and
- initiating, by the computing device, execution of another one of the anti-malware engines to test to detect any malware when the determination indicates the number of messages exceeds the first of the thresholds;
- executing, by the computing device, at least one of a plurality of actions on the at least one file when the testing indicates the detection of malware in the at least one of the files.
A method for providing malware protection for cloud storage, the method comprising:
- providing, by a computing device, an externally deployable malware protection architecture comprising anti-malware engines for malware inspection of one or more files within a cloud storage environment;
- testing, by the computing device, to detect when at least one of the files has any malware by executing one or more of the anti-malware engines supported by one or more anti-malware libraries, wherein the testing further comprises;
- monitoring, by the computing device, a number of messages in a queue related to the one or more files within a cloud storage environment with respect to one or more thresholds;
- and
- adjusting, by the computing device, how many of the anti-malware engines are executed to detect any malware based on the monitored the number of messages with respect to the one or more thresholds;
- and
- wherein the monitoring and the adjusting further comprises:
- determining, by the computing device, when the number of messages in the queue related to the one or more files within the cloud storage environment is below a second of the thresholds;
- and
- stopping, by the computing device, the execution of one of the anti-malware engines when the determination indicates the number of messages in the queue is below the second of the thresholds and a number of the executing ones of the anti-malware engines is above a minimum number;
- executing, by the computing device, at least one of a plurality of actions on the at least one file when the testing indicates the detection of malware in the at least one of the files.
A non-transitory computer readable medium having stored thereon instructions comprising executable code that, when executed by one or more processors, causes the one or more processors to:
- provide an externally deployable malware protection architecture comprising anti-malware engines for malware inspection of one or more files within a cloud storage environment;
- test to detect when at least one of the files has any malware by executing one or more of the anti-malware engines supported by one or more anti-malware libraries, wherein the test further comprises;
- monitor a number of messages in a queue related to the one or more files within a cloud storage environment with respect to two or more thresholds;
- and
- adjust how many of the anti-malware engines are executed to detect any malware based on the monitored the number of messages with respect to the two or more thresholds, wherein the adjust adds one or more of the anti-malware engines when the monitored number of messages is above a first of the thresholds, stops one or more of the anti-malware engines when the monitored number of messages is below a second of the thresholds, and maintains the one or more anti-malware engines executing when the monitored number of messages is in a range of a number of monitored messages between the first and the second of the thresholds;
- and
- execute at least one of a plurality of actions on the at least one file when the testing indicates the detection of malware in the at least one of the files.
A non-transitory computer readable medium having stored thereon instructions comprising executable code that, when executed by one or more processors, causes the one or more processors to:
- provide an externally deployable malware protection architecture comprising anti-malware engines for malware inspection of one or more files within a cloud storage environment;
- test to detect when at least one of the files has any malware by executing one or more of the anti-malware engines supported by one or more anti-malware libraries, wherein the test further comprises;
- monitor a number of messages in a queue related to the one or more files within a cloud storage environment with respect to one or more thresholds;
- and
- adjust how many of the anti-malware engines are executed to detect any malware based on the monitored the number of messages with respect to the one or more thresholds;
- and
- wherein for the monitor and the adjust, when executed by the one or more processors further causes the one or more processors to:
- determine when the number of messages in the queue related to the one or more files within the cloud storage environment exceeds a first of the thresholds;
- and
- initiate execution of another one of the anti-malware engines to test to detect any malware when the determination indicates the number of messages exceeds the first of the thresholds;
- execute at least one of a plurality of actions on the at least one file when the testing indicates the detection of malware in the at least one of the files.
A non-transitory computer readable medium having stored thereon instructions comprising executable code that, when executed by one or more processors, causes the one or more processors to:
- provide an externally deployable malware protection architecture comprising anti-malware engines for malware inspection of one or more files within a cloud storage environment;
- test to detect when at least one of the files has any malware by executing one or more of the anti-malware engines supported by one or more anti-malware libraries, wherein the test further comprises;
- monitor a number of messages in a queue related to the one or more files within a cloud storage environment with respect to one or more thresholds;
- and
- adjust how many of the anti-malware engines are executed to detect any malware based on the monitored the number of messages with respect to the one or more thresholds;
- and
- wherein for the monitor and the adjust, when executed by the one or more processors further causes the one or more processors to:
- determine when the number of messages in the queue related to the one or more files within the cloud storage environment is below a second of the thresholds;
- and
- stop the execution of one of the anti-malware engines when the determination indicates the number of messages in the queue is below the second of the thresholds and a number of the executing ones of the anti-malware engines is above a minimum number;
- execute at least one of a plurality of actions on the at least one file when the testing indicates the detection of malware in the at least one of the files.
A cloud storage malware detection device comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
- provide an externally deployable malware protection architecture comprising anti-malware engines for malware inspection of one or more files within a cloud storage environment;
- test to detect when at least one of the files has any malware by executing one or more of the anti-malware engines supported by one or more anti-malware libraries, wherein the test further comprises;
- monitor a number of messages in a queue related to the one or more files within a cloud storage environment with respect to two or more thresholds;
- and
- adjust how many of the anti-malware engines are executed to detect any malware based on the monitored the number of messages with respect to the two or more threshold, wherein the adjust adds one or more of the anti-malware engines when the monitored number of messages is above a first of the thresholds, stops one or more of the anti-malware engines when the monitored number of messages is below a second of the thresholds, and maintains the one or more anti-malware engines executing when the monitored number of messages is in a range of a number of monitored messages between the first and the second of the thresholds;
- and
- execute at least one of a plurality of actions on the at least one file when the testing indicates the detection of malware in the at least one of the files.
A cloud storage malware detection device comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
- provide an externally deployable malware protection architecture comprising anti-malware engines for malware inspection of one or more files within a cloud storage environment;
- test to detect when at least one of the files has any malware by executing one or more of the anti-malware engines supported by one or more anti-malware libraries, wherein the test further comprises;
- monitor a number of messages in a queue related to the one or more files within a cloud storage environment with respect to one or more thresholds;
- and
- adjust how many of the anti-malware engines are executed to detect any malware based on the monitored the number of messages with respect to the one or more thresholds;
- and
- wherein for the monitor and the adjust, the one or more processors are further configured to be capable of executing the stored programmed instructions to:
- determine when the number of messages in the queue related to the one or more files within the cloud storage environment exceeds a first of the thresholds;
- and
- initiate execution of another one of the anti-malware engines to test to detect any malware when the determination indicates the number of messages exceeds the first of the thresholds;
- execute at least one of a plurality of actions on the at least one file when the testing indicates the detection of malware in the at least one of the files.
A cloud storage malware detection device comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
- provide an externally deployable malware protection architecture comprising anti-malware engines for malware inspection of one or more files within a cloud storage environment;
- test to detect when at least one of the files has any malware by executing one or more of the anti-malware engines supported by one or more anti-malware libraries, wherein the test further comprises;
- monitor a number of messages in a queue related to the one or more files within a cloud storage environment with respect to one or more thresholds;
- and
- adjust how many of the anti-malware engines are executed to detect any malware based on the monitored the number of messages with respect to the one or more thresholds;
- and
- wherein for the monitor and the adjust, the one or more processors are further configured to be capable of executing the stored programmed instructions to:
- determine when the number of messages in the queue related to the one or more files within the cloud storage environment is below a second of the thresholds;
- and
- stop the execution of one of the anti-malware engines when the determination indicates the number of messages in the queue is below the second of the thresholds and a number of the executing ones of the anti-malware engines is above a minimum number;
- execute at least one of a plurality of actions on the at least one file when the testing indicates the detection of malware in the at least one of the files.
Dependencies are inferred from the claim text.