Patent ID: 8918864

Claim:
At least one non-transitory computer readable medium having instructions stored thereon, the instructions when executed on a machine cause the machine to: receive data associated with a communication of the data over a network; receive a hash of the data; during the communication of the data over the network: determine whether the hash of the data matches a hash within a false negative database; determine whether the hash of the data matches a hash within an unwanted content database when it is determined that the hash of the data does not match a hash within the false negative database; and determine whether the hash of the data matches a hash within a clean database when it is determined that the hash of the data does not match a hash within the unwanted content database; when it is determined that the hash of the data does not match a hash of data within the clean database: compute a hash of the data after the data is communicated; compare the computed hash with the received hash; scan the data for unwanted content if the received hash does not match the computed hash; update the unwanted content database with the computed hash if the data is determined to include unwanted content by the scanning; and update the clean database with the computed hash if the data is not determined to include unwanted content by the scanning.