CIFS Proxy Intercepts Network Traffic for Transparent Malware Scanning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for protecting CIFS-enabled networks from malware require significant integration effort and expertise, making them costly and time-consuming to implement.
Innovation Solution
A transparent CIFS proxy is interposed between the client computer and the file server, intercepting and parsing CIFS communication to provide scanning protection by relaying requests, scanning files as needed, and preventing malicious files from being spread, while appearing transparent to both the client and server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a custom-crafted integration of anti-virus server with file server is implemented, then scanning protection capability is improved, but implementation complexity and cost increase significantly
Solution Approach 1:
The patent introduces a CIFS proxy as an intermediary component between the client and file server. The proxy intercepts CIFS traffic, extracts file data, and forwards it to the anti-virus server for scanning. This mediator approach allows scanning protection to be implemented without complex custom integration, as the proxy handles the coordination and data extraction automatically.
Solution Approach 2:
The system segments the file access workflow into distinct components: the CIFS proxy that handles traffic interception and file extraction, the anti-virus server that performs scanning, and the file server that manages file storage. This segmentation allows each component to operate independently with well-defined interfaces, reducing integration complexity while maintaining protection capability.
2Reliability
If custom integration of anti-virus server is performed, then scanning protection is achieved, but implementation time and resource requirements increase
Solution Approach 1:
The CIFS proxy operates autonomously to intercept and process CIFS traffic. It automatically extracts file data from intercepted packets, determines which files require scanning, and forwards them to the anti-virus server without requiring manual configuration or intervention. This self-service capability reduces implementation time and resource requirements compared to custom integration approaches.
Solution Approach 2:
The CIFS proxy serves multiple functions: it acts as a traffic interceptor, file extractor, protocol parser, and coordinator with the anti-virus server. This multi-functionality consolidates what would otherwise require multiple custom-integrated components into a single universal solution, reducing both implementation time and complexity.
Data Source
AI summary
Methods and apparatus for transparently processing files that are manipulated between a server computer and a client computer using the CIFS protocol. The transparent processing employs an in-line CIFS proxy and may include virus scanning, content scanning, and/or security policy implementation.