-
公开(公告)号:US09264434B2
公开(公告)日:2016-02-16
申请号:US12995337
申请日:2009-06-01
申请人: Jean-Pierre David
发明人: Jean-Pierre David
CPC分类号: H04L63/10 , G06F21/6209 , G06F2221/0737 , G06F2221/2101 , H04L51/12 , H04L63/0227
摘要: There is described a module for detecting an electronic file, the module embodied on a computer readable medium and configured for: receiving a portion of a file and extracting content from the portion; applying an initial hashing function numerous times to the content, the initial hashing function being applied to each one of a plurality of blocks of elements within the content and resulting in a representation for each one of the blocks; selecting one of the representations from multiple representations as an initial imprint for the file portion; comparing the initial imprint to contents of a first memory containing a plurality of detection imprints for known electronic files to be detected, the detection imprints having been created using at least the initial hashing function; and determining a match when the initial imprint corresponds to a detection imprint in the first memory.
摘要翻译: 描述了一种用于检测电子文件的模块,该模块体现在计算机可读介质上并且被配置为:接收文件的一部分并从该部分提取内容; 对内容应用初始散列函数多次,初始哈希函数被应用于内容中的多个元素块中的每一个,并且导致每个块的表示; 从多个表示中选择一个表示作为文件部分的初始印记; 将初始印记与包含要检测的已知电子文件的多个检测印记的第一存储器的内容相比较,使用至少初始散列函数创建检测印记; 以及当所述初始印记对应于所述第一存储器中的检测印记时,确定匹配。