Anti-malware Domain Exclusion for Computational Cost Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing anti-malware programs face challenges in efficiently scanning computer systems due to high computational costs and potential conflicts with dynamically changing software domains, requiring manual user intervention and prone to errors.
Innovation Solution
An automated method and system that detects installed and running software programs, determines their domains, excludes them from the anti-malware program's domain, and scans only the remaining domain for malware, using modules for software detection, domain determination, exclusion, and malware scanning.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If anti-malware programs scan all files and memory of a computer system, then malware detection coverage is improved, but computational cost and system performance deteriorate
Solution Approach 1:
The patent segments the computer system's files and memory into distinct domains: protected domains (containing critical system files, running applications, and registered software) and unprotected domains (other files and memory areas). The anti-malware program selectively scans only the unprotected domains while excluding protected domains from scanning, thereby maintaining malware detection coverage in areas where it is most needed while reducing overall computational cost.
2Productivity
If anti-malware programs manually exclude files from scanning, then scanning efficiency is improved, but user sophistication and error rate worsen
Solution Approach 1:
The anti-malware program automatically identifies protected domains by detecting registered software and determining their associated files and memory areas. This self-service mechanism eliminates the need for users to manually configure exclusions, thereby maintaining high scanning efficiency while removing the requirement for user sophistication and minimizing configuration errors.
3Reliability
If anti-malware programs scan dynamically changing software domains, then malware detection accuracy is improved, but system stability and error rate worsen
Solution Approach 1:
The system performs preliminary actions by detecting and registering software programs and their domains before malware scanning occurs. By pre-identifying protected domains through software registration and domain determination, the system prepares the scanning configuration in advance, ensuring accurate malware detection in unprotected areas while preventing conflicts with dynamically changing protected software domains.
Data Source
AI summary
A technique allows for the automatic configuration of anti-malware programs so as to prevent such programs from scanning particular domains. Upon automatic detection of a predetermined type of program, a configuration of that program is determined. Based on the configuration of the predetermined type of program, a domain of the predetermined type of program is excluded from a domain of the anti-malware program. Accordingly, the domain of the anti-malware program is ensured not to overlap with that of the predetermined type of program.