System and method for protecting a computer and a network from hostile downloadables

A system for execution by a server that serves as a gateway to a client, the system comprising:

• a security policy;
• an interface for receiving an incoming Downloadable addressed to a client;
• a comparator, coupled to the interface, for comparing Downloadable security profile data pertaining to the Downloadable, the Downloadable security profile data includes a list a suspicious computer operations that may be attempted by the Downloadable, against the security policy to determine if the security policy has been violated;
• and
• a logical engine for preventing execution of the Downloadable by the client if the security policy has been violated.

A system for execution on a server that serves as a gateway to a client, comprising:

• means for receiving an incoming Downloadable addressed to a client;
• means for comparing Downloadable security profile data pertaining to the Downloadable, the Downloadable security profile data includes a list a suspicious computer operations that may be attempted by the Downloadable, against a security policy to determine if the security policy has been violated;
• and
• means for preventing execution of the Downloadable by the client if the security policy has been violated.

A computer-readable storage medium storing program code for causing a server that serves as a gateway to a client to perform the steps of:

• receiving an incoming Downloadable addressed to a client;
• comparing Downloadable security profile data pertaining to the Downloadable against a security policy to determine if the security policy has been violated;
• and
• preventing execution of the Downloadable by the client if the security policy has been violated.

A method, comprising:

• receiving a Downloadable;
• decomposing the Downloadable into Downloadable security profile data;
• the Downloadable security profile data includes a list a suspicious computer operations that may be attempted by the Downloadable,
• comparing the Downloadable security profile data against a security policy;
• and
• preventing execution of the Downloadable if the Downloadable security profile data violates the security policy.

A method, comprising:

• providing memory storing known-Downloadable security profile data and a that includes a list a suspicious computer operations that may be attempted by a Downloadable known-Downloadable ID corresponding to the Downloadable security profile data;
• receiving an incoming Downloadable;
• fetching all components referenced by the incoming Downloadable;
• performing a hashing function of the Downloadable and the components to compute an incoming-Downloadable ID;
• comparing the known-Downloadable ID against the incoming-Downloadable ID;
• retrieving the Downloadable security profile data if the known-Downloadable ID and the incoming-Downloadable ID match;
• and
• comparing the Downloadable security profile data against a security policy to determine if the incoming Downloadable violates the security policy.