Proxy gateway anti-virus method, pre-classifier, and proxy gateway
The present invention discloses a proxy gateway anti-virus method, a pre-classifier, and a proxy gateway. The method includes: receiving a resource obtaining request for obtaining a to-be-transmitted resource; sending a pre-detection request to a network element that stores the to-be-transmitted resource, to obtain attribute information of the to-be-transmitted resource; judging, based on an anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning; if yes, performing anti-virus scanning on the to-be-transmitted resource that is subsequently obtained; and if no, transparently transmitting the to-be-transmitted resource that is subsequently obtained. The present invention provides a technical solution to pre-detecting whether a to-be-transmitted resource needs anti-virus scanning according to attribute information, and a resource that needs no anti-virus scanning can be transmitted transparently and directly before the resource is sent to a proxy layer, thereby implementing an anti-virus function, improving transmission efficiency, and reducing the waste of resources.
1. A proxy gateway anti-virus method executed by computer hardware, the method comprising:
executing by the computer hardware:
receiving a resource obtaining request;
sending, according to the resource obtaining request, a pre-detection request to a network element that stores a to-be-transmitted resource, to obtain attribute information of the to-be-transmitted resource; and
judging, based on an anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning; if yes, performing anti-virus scanning on the to-be-transmitted resource that is subsequently obtained; and if no, transparently transmitting the to-be-transmitted resource that is subsequently obtained.
2. The method according to claim 1 , wherein:
the receiving a resource obtaining request for obtaining a to-be-transmitted resource comprises:
receiving a download request or an upload request from a client and using the download request or the upload request as the resource obtaining request.
3. The method according to claim 1 , wherein:
the judging, based on an anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning comprises:
judging, according to a file size in the attribute information, whether a size of the to-be-transmitted resource is greater than a set threshold, to determine whether anti-virus scanning is needed; and/or
judging, according to a file type in the attribute information, whether a type of the to-be-transmitted resource belongs to a set type, to determine whether anti-virus scanning is needed.
4. The method according to claim 1 , wherein:
the performing anti-virus scanning on the to-be-transmitted resource that is subsequently obtained comprises:
transmitting the to-be-transmitted resource that is subsequently obtained to a proxy layer for caching and anti-virus scanning.
5. The method according to claim 1 , wherein:
the judging, based on an anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning comprises:
judging, based on a locally stored anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning; or
sending the attribute information to an external server to instruct the external server to judge, based on the anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning, and return a judgment result.
6. The method according to claim 1 , wherein:
the to-be-transmitted resource comprises a hypertext transfer protocol-based file, and the pre-detection request comprises a resource obtaining request setting with a range field, wherein the range field is used to indicate that a byte in a set range in the to-be-transmitted resource is obtained.
7. The method according to claim 1 , wherein:
the attribute information of the to-be-transmitted resource comprises at least one of a file size, a file type, a file name, and a file author.
8. A computer hardware capable of implementing a pre-classifier in a proxy gateway device, the computer hardware comprising:
computing hardware to implement:
a detecting and obtaining module, configured to receive a resource obtaining request, and send, according to the resource obtaining request, a pre-detection request to a network element that stores the to-be-transmitted resource;
an attribute obtaining module, configured to receive attribute information of the to-be-transmitted resource, wherein the attribute information of the to-be-transmitted resource is returned by the network element according to the pre-detection request;
a policy judging module, configured to judge, based on an anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning;
a scan initiating module, configured to, if the policy judging module judges that anti-virus scanning is needed, perform anti-virus scanning on the to-be-transmitted resource that is subsequently obtained; and
a transparent transmission initiating module, configured to, if the policy judging module judges that anti-virus scanning is not needed, transparently transmit the to-be-transmitted resource that is subsequently obtained.
9. The computer hardware implemented pre-classifier according to claim 8 , wherein the policy judging module comprises:
a local judging unit, configured to judge, based on a locally stored anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning; and/or
an external judging unit, configured to send the attribute information to an external server to instruct the external server to judge, based on the anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning, and return a judgment result.
10. A proxy gateway device implemented by computer hardware, comprising a proxy client, a proxy server, and a virus-scanning and caching module, wherein:
the proxy gateway device further comprises the computer hardware implemented pre-classifier according to claim 8 , and the computer hardware implemented pre-classifier function disposed in a lower layer of the proxy client and the proxy server.
11. The method according to claim 2 , wherein:
the judging, based on an anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning comprises:
judging, according to a file size in the attribute information, whether a size of the to-be-transmitted resource is greater than a set threshold, to determine whether anti-virus scanning is needed; and/or
judging, according to a file type in the attribute information, whether a type of the to-be-transmitted resource belongs to a set type, to determine whether anti-virus scanning is needed.
12. The method according to claim 2 , wherein:
the performing anti-virus scanning on the to-be-transmitted resource that is subsequently obtained comprises:
transmitting the to-be-transmitted resource that is subsequently obtained to a proxy layer for caching and anti-virus scanning.
13. The method according to claim 2 , wherein:
the judging, based on an anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning comprises:
judging, based on a locally stored anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning; or
sending the attribute information to an external server to instruct the external server to judge, based on the anti-virus policy and according to the attribute information, whether the to-be-transmitted resource needs anti-virus scanning, and return a judgment result.
14. The method according to claim 2 , wherein:
the to-be-transmitted resource comprises a hypertext transfer protocol-based file, and the pre-detection request comprises a resource obtaining request setting with a range field, wherein the range field is used to indicate that a byte in a set range in the to-be-transmitted resource is obtained.
15. The method according to claim 2 , wherein:
the attribute information of the to-be-transmitted resource comprises at least one of a file size, a file type, a file name, and a file author.