A system for malicious code detection includes a front-end processor, multiple
scanning computer systems, and a detection management system. During operation,
the multiple scanning computer systems scan content for malicious code and generate
an alarm when the content contains malicious code. The front-end processor receives
a flow of content from an external network and distributes copies of the flow to
each of the multiple scanning computer systems in parallel for scanning. The detection
management system employs a countermeasure on the flow if at least one of the scanning
computer systems generates the alarm.