Systems and methods for performing security scans

A system for performing security scans, the system comprising:

• a generation module programmed to generate a first hash of a first file within a set of files that are subject to security scanning;
• a storing module programmed to:
• perform a first security scan on the first file;
• store the first hash to indicate a result of the first security scan of the first file;
• a determination module programmed to:
• identify a second file within the set of files and generating a second hash of the second file;
• determine that the second hash of the second file is equivalent to the first hash of the first file and, in response, determining that the result of the first security scan of the first file applies to the second file;
• an identification module programmed to identify a third file within the set of files and determining that the third file is volatile and therefore less likely to match another file within the set of files, wherein determining that the third file is volatile comprises:
• identifying a prior hash indicator that indicates that a prior hash for the third file has previously been generated;
• identifying a current hash indicator that indicates that no valid current hash for the third file is available;
• wherein when it is determined that the prior hash indicator indicates that a prior hash has been previously generated and that the current hash indicator indicates that no valid current hash is available, determining that the third file has previously changed;
• a scanning module programmed to perform a second security scan on the third file instead of generating a third hash of the third file in response to determining that the third file is volatile;
• at least one processor configured to execute the generation module, the storing module, the determination module, the identification module, and the scanning module.

A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

• generate a first hash of a first file within a set of files that are subject to security scanning;
• perform a first security scan on the first file;
• store the first hash to indicate a result of the first security scan of the first file;
• identify a second file within the set of files and generating a second hash of the second file;
• determine that the second hash of the second file is equivalent to the first hash of the first file and, in response, determining that the result of the first security scan of the first file applies to the second file;
• identify a third file within the set of files and determining that the third file is volatile and therefore less likely to match another file within the set of files, wherein determining that the third file is volatile comprises:
• identifying a prior hash indicator that indicates that a prior hash for the third file has previously been generated;
• identifying a current hash indicator that indicates that no valid current hash for the third file is available;
• wherein when it is determined that the prior hash indicator indicates that a prior hash has been previously generated and that the current hash indicator indicates that no valid current hash is available, determining that the third file has previously changed;
• perform a second security scan on the third file instead of generating a third hash of the third file in response to determining that the third file is volatile.