Anti-Virus Scanning Cache Reference Section Optimization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional anti-virus scanning methods are inefficient due to high disk read/write operations, particularly because they lack a systematic approach to caching normal files, leading to prolonged scanning times and low efficiency.

Innovation Solution

A method and device that record and analyze file and disk section information during scanning to identify a cache reference section, pre-loading frequently used files into memory for scanning, and dynamically adjusting the cache to optimize memory usage and reduce unnecessary disk operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If conventional anti-virus scanning reads files directly from disk during scanning, then disk read/write operations are performed, but scanning efficiency is low due to high disk operation overhead

Engineering Contradiction:
Improvescanning efficiencyVSAvoidscanning time
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-loading files into memory before anti-virus scanning operations. The memory management unit proactively loads files from disk into memory based on scanning requirements, so that when the anti-virus engine needs to scan a file, it is already available in memory, eliminating the need for slow disk read operations during the actual scanning process.

Inventive Principle:
Principle #10Preliminary action

2Productivity

If files are cached into memory to reduce disk operations, then scanning efficiency improves, but memory capacity is limited and cannot store all normal files

Engineering Contradiction:
Improvescanning efficiencyVSAvoidmemory capacity
Core Design Contradiction:
ProductivityVSQuantity of substance

Solution Approach 1:

The system applies local quality by selectively caching only specific files in memory rather than attempting to cache all files. The memory management unit identifies and caches normal files that are likely to be scanned or have been recently scanned, while leaving other files on disk. This selective caching approach optimizes memory utilization by storing only the most relevant files in the limited memory space.

Inventive Principle:
Principle #3Local quality

3Loss of energy

If more files are cached into memory, then disk read/write operations decrease, but memory storage pressure increases

Engineering Contradiction:
Improvedisk operation overheadVSAvoidmemory storage pressure
Core Design Contradiction:
Loss of energyVSStress or pressure

Solution Approach 1:

The system implements discarding and recovering by dynamically managing cached files in memory. When memory becomes full or when files are no longer needed for scanning, the memory management unit discards less recently used or less important files from memory. This allows the system to continuously adapt to changing scanning requirements while maintaining optimal memory utilization, reducing storage pressure when necessary while still providing fast access to frequently scanned files.

Inventive Principle:
Principle #34Discarding and recovering

Data Source

PatentUS9325736B2Method and device for anti-virus scanning
Publication Date: 2016.04.26 TENCENT TECHNOLOGY (SHENZHEN) CO LTD
  • US9325736B2 patent drawing
  • US9325736B2 patent drawing
  • US9325736B2 patent drawing

AI summary

A method for anti-virus scanning is described, including: when performing an anti-virus operation on at least one file in a disk, recording information of the at least one file and information of a disk section having a read/write operation during the anti-virus scan operation; analyzing the information of the at least one file and the information of the disk section having the read/write operation during the anti-virus scan operation, and obtaining a cache reference section; loading one or more files in the cache reference section into a memory, and reading the loaded one or more files in the memory to scan when receiving an anti-virus scan request. Further, a device for anti-virus scanning is also described. In the method and the device, the amount of disk read/write operations during the anti-virus scan can be decreased, and the efficiency of anti-virus scanning can be improved.