A method and terminal equipment for realizing full-disk scanning function by using usn

Abstract

The invention discloses a method for realizing a whole disk scanning function by using USN and a terminal device. The method comprises the following steps: a whole disk scanning system receives a trigger operation for scanning a file system; the scanning log corresponding to the previous scanning operation is obtained from the log system; according to the starting point of file scanning, a file istaken out sequentially for analysis and restoration, and the relevant information of the file and the file obtained after analysis and restoration are sent to the policy system; the policy system scans the relevant information of the file and the file after parsing and restoring, obtains a scanning result, and updates the scanning log; if the scan result is a hit, the hit result is sent to the overall scanning system. The method and the terminal device apply the updated serial number USN and the policy rule to realize the whole disk scanning, and the safety and the flexibility of the whole disk scanning are improved.

Description

technical field [0001] The present disclosure belongs to the field of computers, in particular, it relates to a method and a terminal device for implementing a full-disk scanning function using USN. Background technique [0002] In computer applications, it is often necessary to scan files in a storage system composed of disks or hard disks. The most common scanning method is full-disk scanning. Traditional full-disk scanning enumerates the files in the storage system to be scanned. For example, start with The root directory of the storage system enumerates the files, and then sends them to the following scanning engines one by one after the enumeration, and one or more scanning engines obtain a scanning result after scanning the files. But this scanning method is time-consuming and consumes system resources. In order to overcome the shortcomings of full-disk scanning, patent WO2017084557A1 proposes a file scanning method for killing viruses, which uses incremental logging ...

AI Technical Summary

Problems solved by technology

[0003] At the same time, whether it is a traditional full-disk scan or an incremental full-disk scan, the scan provided by the existing technology is usually a virus scan engine, which can only provide users with a scan result based on the existing virus database, which does not take into account the Users pay more attention to the scanning of sensitive information, that is, the scanning strategy cannot be customized according to the user's needs; and, in order to ensure the accuracy of the scanning results, most of them require the terminal to provide the function of surfing the Internet, which requires users with high requirements for sensitive data , there is also a potential security risk

[0004] In addition, if new file operations occur on scanned files, such as adding, deleting, or modifying file operations, the existing full-disk scan cannot know whether these operations occurred after scanning, so it will miss scanning these files again operation, but also poses data security risks

Images