A computer program product, comprising a computer usable medium having a computer readable program code therein, the computer readable program code adapted to be executed for computer security, the method comprising: providing a system, wherein the system comprises distinct software modules, and wherein the distinct software modules comprise an information re-communicator and a mobile code executor; receiving, at the information re-communicator, downloadable-information including executable code; and causing mobile protection code to be executed by the mobile code executor at a downloadable-information destination such that one or more operations of the executable code at the destination, if attempted, will be processed by the mobile protection code. view more

A computer gateway for an intranet of computers, comprising: a scanner for scanning incoming files from the Internet and deriving security profiles for the incoming files, wherein each of the security profiles comprises a list of computer commands that a corresponding one of the incoming files is programmed to perform; a file cache for storing files that have been scanned by the scanner for future access, wherein each of the stored files is indexed by a file identifier; and a security profile cache for storing the security profiles derived by the scanner, wherein each of the security profiles is indexed in the security profile cache by a file identifier associated with a corresponding file stored in the file cache; and a security policy cache for storing security policies for intranet computers within the intranet, the security policies each including a list of restrictions for files that are transmitted to a corresponding subset of the intranet computers. view more

A computer-readable storage medium storing program code for causing a computer to perform the steps of: retrieving a requested file from the Internet; scanning the retrieved file to determine computer commands that the file is programmed to perform; deriving a security profile for the retrieved file, the security profile including a list of at least one computer command that the retrieved file is programmed to perform; storing the retrieved file within a file cache for future access, and indexing the retrieved file in the file cache with a file ID; and storing the security profile for the retrieved file within a security profile cache for future access, and indexing the security profile in the security profile cache with the file ID of the retrieved file, so that when the same file is subsequently requested from the Internet, its security profile is readily accessible from the security profile cache without the need to perform the scanning. view more

A method comprising: receiving by an inspector a Downloadable; generating by the inspector a first Downloadable security profile that identifies suspicious code in the received Downloadable; and linking by the inspector the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients. view more

The method of claim 1, wherein the Downloadable includes a JavaScript.TM. script.

The method of claim 1, wherein the first Downloadable security profile includes a list of operations deemed suspicious by the inspector.

An inspector system comprising: memory storing a first rule set; and a first content inspection engine for using the first rule set to generate a first Downloadable security profile that identifies suspicious code in a Downloadable, and for linking the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients. view more

A computer-readable storage medium storing program code for causing a data processing system on an inspector to perform the steps of: receiving a Downloadable; generating a first Downloadable security profile that identifies suspicious code in the received Downloadable; and linking the first Downloadable security profile to the Downloadable before a web server makes the Downloadable available to web clients. view more

A policy-based cache manager, comprising: a memory storing a cache of digital content, a plurality of policies, and a policy index to the cache contents, the policy index including entries that relate cache content and policies by indicating cache content that is known to be allowable relative to a given policy, for each of a plurality of policies; a content scanner, communicatively coupled with said memory, for scanning a digital content received, to derive a corresponding content profile; and a content evaluator, communicatively coupled with said memory, for determining whether a given digital content is allowable relative to a given policy, based on the content profile, the results of which are saved as entries in the policy index. view more

A system for generating a Downloadable ID to identify a Downloadable, comprising:</claim-text> a communications engine for obtaining a Downloadable that includes one or more references to software components required to be executed by the oadable; and an ID generator coupled to the communications engine that fetches at least one software component identified by the one or more references, and for performing a hashing function on the Downloadable and the fetched software components to generate a Downloadable ID. view more

The system of claim 9, wherein the Downloadable includes HTML code.

A processor-based system, comprising: an information monitor for receiving downloadable-information; a content inspection engine communicatively coupled to the information monitor for determining whether the downloadable-information includes executable code; and a packaging engine communicatively coupled to the content inspection engine for causing mobile protection code (“MPC”) to be communicated to at least one information-destination of the downloadable-information, if the downloadable-information is determined to include executable code, wherein the content inspection engine comprises one or more downloadable-information analyzers for analyzing the downloadable-information, each analyzer producing therefrom a detection indicator indicating whether a downloadable-information characteristic corresponds with an executable code characteristic, and an inspection controller communicatively coupled to the analyzers for determining whether the indicators indicate that the downloadable-information includes executable code. view more

The system of claim 9, wherein at least one of the detection-indicators indicates a level of downloadable-information characteristic and executable code characteristic correspondence.