Back to results
US 8,015,221 B1Granted
Systems and methods for maintaining file-type information
AssigneeSymantec Corporation
InventorSpencer Smith
Life of this patent
Estimating the term…
Abstract
A method for maintaining file-type information for a file is described. Data in a first position of a file is analyzed. A file-type for the file is determined based on the analyzed data in the first position. The file is monitored for input/output operations. The file-type of the file is updated if input/output operations occur within the first position of the file.
Claims17
A method for maintaining file-type information for a file, the method comprising:
- analyzing, by a processor of a computing device, data in a first position of a file, wherein the first position comprises a header of the file;
- determining, by the processor, a file-type for the file based on the analyzed data in the first position;
- storing file-type information for the file in a database;
- monitoring, by the processor, the file for input/output operations;
- identifying, by the processor, a modification to the data in the first position from the input/output operations;
- determining whether the modification to the data satisfies a predetermined threshold;
- maintaining, by the processor, the file-type for the file when the modification to the data in the first position does not satisfy the predetermined threshold, wherein maintaining the file-type comprises preserving the file-type information previously stored in the database and preventing the data in the first position from being re-analyzed to determine the file-type for the file;
- and
- updating, by the processor, the file-type of the file when input/output operations occur within the first position of the file and the modification to the data in the first position satisfies the predetermined threshold.
6 more elements
A computer system that is configured to maintain file-type information for a file, the computer system comprising:
- a processor;
- memory in electronic communication with the processor;
- and
- a file-type module, the module configured to:
- analyze data in a first position of a file, wherein the first position comprises a header of the file;
- determine a file-type for the file based on the analyzed data in the first position;
- store file-type information for the file in a database;
- monitor the file for input/output operations;
- identify a modification to the data in the first position from the input/output operations;
- determine whether the modification to the data satisfies a predetermined threshold;
- maintain the file-type of the file when the modification to the data in the first position does not satisfy the predetermined threshold, wherein maintaining the file-type comprises preserving the file-type information previously stored in the database and preventing the data in the first position from being re-analyzed to determine the file-type for the file;
- and
- update the file-type of the file when input/output operations occur within the first position of the file and the modification to the data in the first position satisfies the predetermined threshold.
10 more elements
A computer-program product for maintaining file-type information for a file, the computer-program product comprising a non-transitory computer-readable medium having instructions thereon, the instructions comprising:
- code programmed to analyze data in a first position of a file, wherein the first position comprises a header of the file;
- code programmed to determine a file-type for the file based on the analyzed data in the first position;
- code programmed to store file-type information for the file in a database;
- code programmed to monitor the file for input/output operations;
- code programmed to identify a modification to the data in the first position from the input/output operations;
- code programmed to determine whether the modification to the data satisfies a predetermined threshold;
- code programmed to maintain the file-type of the file when the modification to the data in the first position does not satisfy the predetermined threshold, wherein maintaining the file-type comprises preserving the file-type information previously stored in the database and preventing the data in the first position from being re-analyzed to determine the file-type for the file;
- and
- code programmed to update the file-type of the file when input/output operations occur within the first position of the file and the modification to the data in the first position satisfies the predetermined threshold.
6 more elements
Dependencies are inferred from the claim text.