Content Disarm and Reconstruction (CDR) is a signature-free technology that detects and removes all known and unknown malware hidden in files. CDR technology does not use behavior or signature analysis, instead it removes all file components that are foreign to a data container. CDR scans every line of code, and as a result, is able to detect and disarm all potentially malicious code. The technology can be used as a complementary or alternate tool that improves detection rates while lowering the processing time when compared to existing standard technologies used today.

“As malware sandbox evasion techniques improve, the use of CDR at the email gateway as a supplement or alternative to sandboxing will increase.”