基本信息:
- 专利标题: HERD BASED SCAN AVOIDANCE SYSTEM IN A NETWORK ENVIRONMENT
- 专利标题(中):基于网络环境的基于扫描的扫描系统
- 申请号:PCT/US2013/071327 申请日:2013-11-21
- 公开(公告)号:WO2014105308A1 公开(公告)日:2014-07-03
- 发明人: RAMANAN, Venkata , HUNT, Simon
- 申请人: MCAFEE, INC. , RAMANAN, Venkata , HUNT, Simon
- 申请人地址: 2821 Mission College Boulevard Santa Clara, California 95054 US
- 专利权人: MCAFEE, INC.,RAMANAN, Venkata,HUNT, Simon
- 当前专利权人: MCAFEE, INC.,RAMANAN, Venkata,HUNT, Simon
- 当前专利权人地址: 2821 Mission College Boulevard Santa Clara, California 95054 US
- 代理机构: DALGLISH, Leslie E.
- 优先权: US13/728,705 20121227
- 主分类号: G06F21/00
- IPC分类号: G06F21/00 ; G06F15/16
摘要:
A method in one example embodiment includes generating a signature for an object in a compute node in a network, searching a memory element for the signature, and responsive to determining the memory element does not contain the signature, scanning the object. The method also includes updating the memory element with a scan result, and synchronizing the memory element of the compute node with one or more memory elements of one or more other compute nodes in the network. In specific embodiments, the scan result includes the signature of the object and a threat level of the object. In further embodiments, the synchronizing includes sending the scan result to one or more other compute nodes in the network. In more specific embodiments, the scan result is sent with one or more other scan results after a predetermined interval of time from a previous synchronization.
摘要(中):
一个示例实施例中的方法包括为网络中的计算节点中的对象生成签名,在存储元件中搜索签名,并且响应于确定存储器元素不包含签名,扫描对象。 该方法还包括用扫描结果来更新存储元件,以及使计算节点的存储元件与网络中一个或多个其他计算节点的一个或多个存储元件同步。 在具体实施例中,扫描结果包括对象的签名和对象的威胁级别。 在另外的实施例中,同步包括将扫描结果发送到网络中的一个或多个其他计算节点。 在更具体的实施例中,在从先前同步起的预定时间间隔之后,用一个或多个其他扫描结果发送扫描结果。