Antivirus Engine Integration for Virus Detection Accuracy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current antivirus systems using a single engine are inadequate for detecting and killing computer viruses, as they cannot efficiently utilize the advantages of multiple antivirus engines or develop effective allocation strategies, leading to reduced accuracy and system security.
Innovation Solution
A method and device that utilize multiple antivirus engines by sending a file for scanning, integrating the returned scanning information according to actual strategies, and determining a comprehensive scanning result, which includes pre-processing procedures and strategic prioritization of antivirus engine contributions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple antivirus engines are used to detect and kill computer viruses, then the accuracy and system security are improved, but the device complexity and management difficulty increase
Solution Approach 1:
The system segments the virus detection function by dividing the scanning process into distinct stages: pre-scanning by a first antivirus engine and post-scanning by a second antivirus engine. This segmentation allows each engine to specialize in specific virus types while maintaining overall system reliability without requiring all engines to process every file simultaneously.
Solution Approach 2:
The patent introduces an intermediary management module that coordinates between multiple antivirus engines. This mediator receives files from the first engine, processes them, and then distributes them to the second engine for additional scanning, thereby simplifying the coordination complexity of multiple engines through a centralized control structure.
2Productivity
If multiple antivirus engines are deployed to enhance virus detection capabilities, then the virus killing efficiency is improved, but the resource consumption and processing time increase
Solution Approach 1:
The system performs preliminary scanning action using the first antivirus engine before the file is processed by the second antivirus engine. This preliminary action filters out easily detectable viruses, allowing the second engine to focus only on files that require additional analysis, thereby reducing overall processing time while maintaining high detection efficiency.
Solution Approach 2:
The patent applies partial action by having the second antivirus engine scan only specific portions of files or only files that passed through the first engine's scanning. This selective scanning approach maintains virus killing efficiency while reducing the total resource consumption and time required compared to full scanning by all engines.
3Device complexity
If a single antivirus engine is used, then the system complexity is reduced, but the virus detection accuracy and coverage are insufficient
Solution Approach 1:
The patent merges the capabilities of multiple antivirus engines into a unified scanning system. The first and second antivirus engines are combined in a sequential scanning architecture where files are processed by both engines through the intermediary module, achieving the reliability of multiple engines while presenting a simplified unified interface to users.
Data Source
AI summary
The present invention discloses a method and device for detecting and killing computer viruses using multiple antivirus engines. The method includes: receiving a request for scanning a file to be scanned; sending the information of the file to multiple antivirus engines for scanning, receiving the scanning information returned by the antivirus engines; determining the scanning result of the file, and sending the scanning result of the file, thereby supporting virus killing by using multiple antivirus engines. The present invention integrates the scanning result of multiple antivirus engines according to specific strategies, and utilizes characteristics of different antivirus engines to completely detect and kill various computer viruses based on the scanning result, thereby improving accuracy of virus killing and security of the system.