Kaspersky Scan Engine and HTTP mode

Hypertext Transfer Protocol (HTTP) is the standard communication protocol in the client-server computer model. In HTTP mode, Kaspersky Scan Engine operates as a REST-like service that receives HTTP requests in JSON or plain text format from client applications. The service scans objects passed in these requests, and sends back HTTP responses with scan results in JSON or plain text format.

In additional, a sample HTTP client source code is shipped in the distribution package. This sample HTTP client demonstrates how to make requests to Kaspersky Scan Engine in HTTP mode. You can also use the compiled sample to scan files from the command line.

Connection types

Kaspersky Scan Engine supports two connection types:

• TCP connection
• UNIX socket connection

  For Linux systems only.

Scanning capabilities

Kaspersky Scan Engine supports the following scan modes:

• scanfile

  In this mode, the sample HTTP client passes file paths to Kaspersky Scan Engine, which reads the files and scans them.

• scanmemory

  In this mode, the sample HTTP client passes file contents to Kaspersky Scan Engine, which scans the contents.

• checkurl

  In this mode, the sample HTTP client passes URLs to Kaspersky Scan Engine, which checks them for malicious and phishing addresses.

For more information, see section "Making requests in HTTP mode".

Page top