1) Must have a local agent/software on the local computer that monitors a directory for new files

1) Must have a local agent/software on the local computer that monitors a directory for new files.

2) Whenever a new file is added to this directory, the local agent must check the file to find if it is in the blacklist or whitelist.

3) If it is in neither, then the local agent must upload it to the cloud.

4) On the cloud side, there must be the following components: multiple virtual machines each with a separate anti virus engine installed, and a central monitor virtual machine that accepts file uploads (or monitors file uploads to S3), and then uses cloud services such as AWS Lambda to provide the file to the virtual machines with anti virus engines. The engines scan the file and sends report back to the monitor which combines the reports and sends the report back to the local engine, telling it if it is a virus/not a virus. Also, the blacklist or whitelist must be updated