Apparatus And Method For Acceleration of Security Applications Through Pre-Filtering

• US 20070039051A1
• Filed: 08/18/2006
• Published: 02/15/2007
• Est. Priority Date: 11/30/2004
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Sensory Networks, Inc. (Intel Corporation)
• Inventors: Williams, Darren, Tan, Teewoon, Barrie, Robert, Gould, Stephen, Duthie, Peter, Bisroev, Peter
• Application Number:
  US11/465,634
• Publication Number:
  US 20070039051A1
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements

Abstract

A first security processing stage performs a first multitude of tasks and a second security processing stage performs a second multitude of tasks. The first and second multitude of tasks may include common tasks. The first security processing stage is a prefilter to the second security processing stage. The input data received as a data stream is first processed by the first security processing stage, which in response, generates one or more first processed data streams. The first processed data streams may be further processed by the second security processing stage or may bypass the second security processing stage. The first security processing stage operates at a speed greater than the speed of the second security processing stage.

Claims

1. A method for processing information, the method comprising:

receiving a data stream in a first format;

processing the received data stream via a first security processing stage configured to perform a first plurality of tasks at a first processing speed to generate one or more first processed data streams in a second format;

processing the one or more first processed data streams via a second security processing stage configured to perform a second plurality of tasks at a second processing speed to generate one or more second processed data streams in a third format;

said first and second plurality of tasks to include one or more common tasks; and

said first processing speed being greater than said second processing speed.

2. The method of claim 1 wherein said one or more first processed data streams is a first output data stream.

3. The method of claim 1 wherein said one or more second processed data streams is a second output data stream.

4. The method of claim 1 wherein each of said first and second security processing stages is an anti virus processing stage.

5. The method of claim 1 wherein each of said first and second security processing stages is an intrusion detection processing stage.

6. The method of claim 1 wherein each of said first and second security processing stages is an anti spam processing stage.

7. The method of claim 1 wherein each of said first and second security processing stages is an anti spyware processing stage.

8. The method of claim 1 wherein each of said first and second security processing stages is a content processing stage.

9. The method of claim 1 wherein at least one of the first plurality of tasks is performed concurrently with at least one of the second plurality of tasks.

10. The method of claim 1 wherein said first processing stage is further configured to include one or more hardware modules adapted to execute instructions to generate the one or more first processed data streams.

11. The method of claim 1 wherein the one or more first processed data streams are associated with one or more classes of network data each having a different format and each being different from the first format.

12. The method of claim 1 wherein the one or more first processed data streams are associated with one or more classes of network data each having a format different from the first format.

13. The method of claim 1 wherein each of the one or more first processed data streams is directed to a different destination.

14. The method of claim 1 wherein the one or more second processed data streams are associated with one or more classes of network data each having a different format and each being different from the first format.

15. The method of claim 1 wherein the one or more second processed data streams are associated with one or more classes of network data each having a format different from the first format.

16. The method of claim 1 wherein each of the one or more second processed data streams is directed to a different destination.

17. The method of claim 1 wherein the second security processing stage is further configured to generate one or more data streams in a fourth format.

34. The processing system of claim 1 wherein said first processing stage is further configured to include one or more hardware modules adapted to execute instructions to generate the one or more first processed data streams.

23. A processing system comprising:

a first security processing stage configured to perform a first plurality of tasks on a data stream having a first format and at a first processing speed to generate one or more first processed data streams in a second format;

a second security processing stage configured to perform a second plurality of tasks on the one or more first processed data streams at a second processing speed to generate one or more second processed data streams in a third format;

said first and second plurality of tasks to include one or more overlapping tasks; and

said first processing speed being greater than said second processing speed.

18. The method of claim 23 further comprising:

dividing the received data stream into a first sequence and a second sequence said first sequence being processed by a hardware content security module, and said second sequence being processed by a software content security module.

19. The method of claim 18 further comprising:

combining the one or more second processed data streams having the third format; and

processing the one or more data streams having the fourth format.

20. The method of claim 23 wherein the second security processing stage is configured to process the one or more data streams having the second format data by using one or more content security modules.

21. The method of claim 20 wherein the one or more content security modules are hardware modules.

22. The method of claim 20 wherein the one or more content security modules are commercially available software modules.

24. The processing system of claim 23 wherein said one or more first processed data streams is a first output data stream.

25. The processing system of claim 23 wherein said one or more second processed data streams is a second output data stream.

26. The processing system of claim 23 wherein each of said first and second security processing stages is an anti virus processing stage.

27. The processing system of claim 23 wherein each of said first and second security processing stages is an intrusion detection processing stage.

28. The processing system of claim 23 wherein each of said first and second security processing stages is an anti spam processing stage.

29. The processing system of claim 23 wherein each of said first and second security processing stages is an anti spyware processing stage.

30. The processing system of claim 23 wherein each of said first and second security processing stages is a content processing stage.

31. The processing system of claim 23 wherein said second format is different from said third format.

32. The processing system of claim 23 wherein said first format is different from said second format.

33. The processing system of claim 23 wherein said second format is different from said third format.

35. The processing system of claim 23 wherein the one or more first processed data streams are associated with one or more classes of network data.

36. The processing system of claim 23 wherein each of the one or more first processed data streams is directed to a different destination.

37. The processing system of claim 23 wherein the one or more second processed data streams are associated with one or more classes of network data.

38. The processing system of claim 23 wherein each of the one or more second processed data streams is directed to a different destination.

39. The processing system of claim 23 wherein the second security processing stage comprises one or more software content security modules and one or more hardware content security modules, the second security processing stage configured to generate one or more data streams in a fourth format.

40. The processing system of claim 39 wherein the received data stream is divided into a first sequence of components and a second sequence of components, the first sequence of components processed by the hardware content security modules, and the second sequence of components processed by the software content security modules.

41. The processing system of claim 40 further comprising:

a third content security processing stage configured to combine the one or more second processed data streams having the third format, and further configured to process the one or more data streams having the fourth format.

42. The processing system of claim 23 wherein the second security processing stage is configured to process the one or more data streams having the second format data by using one or more content security modules.

43. The processing system of claim 42 wherein the one or more content security modules are hardware modules.

44. The processing system of claim 42 wherein the one or more content security modules are commercially available software modules.