Patent ID: 9729513
Date: 2017-08-08
CPC Classifications: G06F,H04L

Claim:
1. A system, comprising: a receiver to receive a file at a computer system, the file including a content, the content including a first portion; a file type identifier to identify a purported file type of the file; a scanner to scan the content of the file using a set of rules corresponding to the purported file type, the scanner operative to determine that the file does not conform to the set of rules corresponding to the purported file type for a first reason with an associated first issue identifier (ID); a quarantine that can store the file; a file issue exclusion policy specifying an approved file type and a second issue ID; a file content policy to allow the first portion of the content of the file to be included in the file, the file content policy including a whitelist of hashes of known approved portions of content; a hasher to generate a hash of the first portion of the content of the file; a comparator to compare the first portion of the content of the file with the whitelist; a scanning service to perform additional analysis to determine whether the file can be released from quarantine; and a transmitter to transmit the file to the recipient instead of storing the file in the quarantine when the approved file type in the file issue exclusion policy matches the purported file type and the second issue ID in the file issue exclusion policy matches the first issue ID, wherein the first portion of the content of the file is included in the file when the first portion of the content of the file matches a known approved portion of content in the whitelist.