远程机器扫描
作为我正在构建的 Web 应用程序的一部分,我需要能够扫描远程用户的计算机是否有病毒/恶意软件,然后他们才能继续使用 Web 应用程序......类似于 McAfee 按需扫描。
我假设 ActiveX 将是可行的方法(因为防病毒公司的所有按需扫描程序似乎都是基于 ActiveX 的)。
我对如何解决这个问题有点困惑。 我希望我不必从头开始整理一些东西。
有人有什么想法吗? 是否可以将一些已经可用的组件集成到我的代码中来执行此操作?
如果您需要更多信息,请告诉我。
问候, 索纳尔.
As part of a web-application I'm building, I need to be able to scan the remote user's machine for viruses / malware, before they can continue using the web-application ... something like the McAfee On-Demand Scan.
I'm assuming that ActiveX would be the way to go (since all the On-Demand scanners of the antivirus companies seem to be ActiveX-based).
I'm a bit stuck on how to solve this problem. I'm hoping I don't have to rustle up something from scratch.
Does anybody have any ideas ? Is it possible to integrate some already available component into my code to do this ?
Do let me know if there's more information you need.
Regards,
Sonal.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
简短的回答:只是不要这样做。
长答案:我会在这里认真地重新评估您的要求。 从 Web 应用程序强制进行病毒扫描基本上是不可能正确完成的,并且从 Web 应用程序的角度来看没有任何实际目的。 网络的全部要点在于它是由用户发起的请求,并在沙箱内运行。 强制访问计算机的其余部分进行病毒扫描之类的操作与它的工作方式完全相反
我能想到的唯一明智的做法是提供按需扫描,为此您可以最好将您的用户重定向到该领域的专家 - Panda ActiveScan 可能和任何。 但此类服务无论如何都依赖于 Java 小程序、浏览器插件或类似形式的可下载程序 - 它不是通过网络完成的。
Short Answer: Just don't do this.
Long Answer: I would seriously re-evaluate your requirements here. Forcing a virus scan from a webapp is essentially impossible to do properly, and serves no real purpose from the perspective of the webapp. The whole point of the web is that it's a request initiated by the user, and run inside a sandbox. Forcing access to the rest of the machine for something like a virus scan is deliberately the exact opposite of the way it is meant to work
The only thing I can think of which would be sensible would be to offer an on demand scan, for which you would be best to redirect your users to an expert in the area - Panda ActiveScan is probably as good as any. But services such as these rely on downloadable program anyway in the form of java applet, browser plugin or similar - it's not done over the web.
用户是您公司的一部分吗? 他们是否需要在工作中使用该应用程序? 如果没有,我很难看到人们访问您的网站并说“哦......他希望我在我的机器上下载并运行程序!” 听起来是将您的网站列入一堆“阻止列表”的好方法。
另外,您是否与病毒扫描公司达成了商业协议,允许您在人们的计算机上安装其商业软件的多个副本? 我猜不是。
真的,我必须同意科林的观点。 这个想法在开始之前听起来就已经死了。
Is the user part of your company? Is this an application that they will be required to use as part of their employment? If not, I can hardly see people visiting your site and saying "Oooh... he wants me to download and run a program on my machine!" Sounds like a great way to get your site on a bunch of "block lists".
Also, do you have a commercial arrangement with a virus scanning company that would allow you to install multiple copies of their commercial software on people's machines? I'm guessing not.
Really, I have to agree with Colin. This idea sounds dead before it even starts.