File-scoring service protocols
The
Cylance OEM Engine
file-scoring service (Cylance
TcpService) provides a method to score individual files and archives. The file-scoring service supports three protocols:- The legacy Infinity Daemon Protocol (IDP), also known as theCylanceTcpService Protocol, is the proprietary binary protocol supported by TcpShim, InfinityTcpService, andCylanceTcpService.To use the service with this protocol, a TCP connection must be established with the server. The service can be configured to listen on any valid TCP port number (1024 - 65535). Port 9002 is the default port in InfinityDaemonClient, samplescored, samplescore, and ttmstatic. The port used by the service can be customized using the configuration file or thepor--portcommand-line option.
- A REST-based API called theCylanceEngine RESTful API (CERA), based on standard HTTP and HTTPS connections using JSON for both requests and responses. This protocol was introduced inOEM Enginev0.11 and is supported byCylanceTcpService only. Note that this is only available underMicrosoft .NET5.0 or later (v0.11) orMicrosoft .NET6.0 or later (v1.0 and later); it is not available forMono.
- An Internet Content Adaptation Protocol (ICAP) service, based on the ICAP protocol (rfc3507). The service is situated between an ICAP client and the file-scoring service using the CERA. For documentation, see the ICAP service package that is downloaded separately.
The protocols serve as a bridge between client code and
Cylance OEM Engine
activities, acting as a generic service, providing the infrastructure to process files and hand the results back to the client.