How to Clean Files by Rebuilding Them Instead of Scanning Them

A security method that stops malware by rebuilding files from scratch based on strict format rules, rather than looking for known viruses.

What it covers

This patent describes a file sanitization process that ignores the traditional 'detect and block' approach used by antivirus software. Instead of scanning for known malicious signatures, the system parses an incoming file to see if it matches a strict set of rules for its specific file type (like a PDF or Word doc). If the system finds data that doesn't fit the rules, it checks if that data is authorized; if so, it effectively 'rebuilds' the file from the ground up using only clean, verified data. This ensures the final output is a structurally perfect version of the original, leaving behind any hidden malicious code that might have been embedded in the non-conforming parts.

What it doesn't cover

• —Does not cover traditional antivirus methods that rely on signature-based scanning of files.
• —Does not cover systems that simply delete non-conforming data without attempting to regenerate a valid file.
• —Does not cover methods that do not perform a structural parse of the file's internal data format.

The clever bit

The system treats the file as a set of rules rather than a static object, rebuilding it to be structurally compliant. By ignoring the 'content' and focusing on the 'format,' it makes it impossible for hidden malicious code to survive the reconstruction process.

Why it matters

This technology represents a shift toward 'Content Disarm and Reconstruction' (CDR). By focusing on the structure of a file rather than its reputation or signature, it can neutralize 'zero-day' threats—new viruses that antivirus software hasn't seen before. It is a critical component for high-security environments where the risk of an unknown file containing a hidden exploit is too high to ignore.

Real-world examples

• 1.Glasswall CDR technology
• 2.Email attachment sanitization gateways
• 3.Secure document upload portals