Cloud-based malware detection
AssigneeZscaler, Inc.
InventorsKailash KAILASH, Robert L. VOIT, Jose RAPHEL
Life of this patent
Estimating the term…
Abstract
Systems, methods and apparatus for malware detection detect and stop the distribution of malware and other undesirable content before such content reaches computing systems. A cloud-based malware detection method includes receiving a signature from a computer, wherein the signature which identifies a file and the signature is smaller in size than the file; determining whether the file is trusted, untrusted, or unknown for malware based on the signature; and transmitting whether the file is trusted, untrusted, or unknown for malware to the computer based on the determining, wherein the computer is precluded from distribution of the file responsive to the file being untrusted.
Claims20
A cloud-based malware detection method implemented by a Malware Detection Service (MDS) executed on a server located on an external network from a computer, the cloud-based malware detection method comprising:
- receiving a signature from the computer, wherein the signature which identifies a file and the signature is smaller in size than the file;
- determining whether the file is trusted, untrusted, or unknown for malware based on the signature;
- and
- transmitting whether the file is trusted, untrusted, or unknown for malware to the computer based on the determining, wherein the computer is precluded from distribution of the file responsive to the file being untrusted.
The cloud-based malware detection method of claim 4, wherein the table of file signatures is managed based on the MDS operating with a plurality of computers.
A Malware Detection Service (MDS) executed on a server located on an external network from a computer, the MDS comprising:
- a processor;
- and
- memory storing computer program instructions that when executed cause the processor to:
- receive a signature from the computer, wherein the signature which identifies a file and the signature is smaller in size than the file;
- determine whether the file is trusted, untrusted, or unknown for malware based on the signature;
- and
- transmit whether the file is trusted, untrusted, or unknown for malware to the computer based on the determination, wherein the computer is precluded from distribution of the file responsive to the file being untrusted.
A cloud-based malware detection method implemented by a computer communicatively coupled to a Malware Detection Service (MDS) executed on a server located on an external network from the computer, the cloud-based malware detection method comprising:
- generating a signature which identifies a file and the signature is smaller in size than the file;
- transmitting the signature to the MDS;
- receiving an indication from the MDS of whether the file is trusted, untrusted, or unknown for malware based on the signature;
- and
- performing security operations on the file based on the indication.
Dependencies are inferred from the claim text.