System and method for attaching a downloadable security profile to a downloadable

A method performed by a network gateway comprising:

• receiving a Downloadable with a linked first Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client:
• determining whether to trust the first Downloadable security profile;
• and
• comparing the first Downloadable security profile against the security policy if the first Downloadable security profile is trustworthy.

A network gateway system comprising:

• a Downloadable interceptor for receiving a Downloadable;
• a file reader coupled to the interceptor for determining whether the Downloadable includes a linked Downloadable security profile that identifies suspicious code in the Downloadable, wherein if the Downloadable includes a linked Downloadable security profile, the Downloadable was linked before the web server makes the Downloadable available to the web client;
• an engine coupled to the file reader for determining whether to trust the Downloadable security profile;
• and
• a security policy analysis engine coupled to a verification engine for comparing the Downloadable security profile against a security policy if the engine determines that the Downloadable security profile is trustworthy.

A computer-readable storage medium storing program code for causing a data processing system on an inspector to perform the steps of:

• receiving a Downloadable;
• generating a first Downloadable security profile that identifies suspicious code in the received Downloadable;
• and
• linking the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients.

A computer-readable storage medium storing program code for causing a data processing system on a network gateway to perform the steps of:

• receiving a Downloadable with a linked first Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client:
• determining whether to trust the first Downloadable security profile;
• and
• comparing the first Downloadable security profile against the security policy if the first Downloadable security profile is trustworthy.

An inspector system comprising:

• means for receiving a Downloadable;
• means for generating a first Downloadable security profile that identifies suspicious code in the received Downloadable;
• and
• means for linking the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients.

A network gateway system comprising:

• means for receiving a Downloadable with a linked first Downloadable security profile that identifies suspicious code in the Downloadable, the Downloadable security profile being linked to the Downloadable before the web server make the Downloadable available to the web client:
• means for determining whether to trust the first Downloadable security profile;
• and
• means for comparing the first Downloadable security profile against the security policy if the first Downloadable security profile is trustworthy.