Antivirus Record Distribution via Effectiveness Coefficient
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing antivirus systems face challenges in efficiently distributing and managing antivirus data, leading to increased hard drive space usage and ineffective detection of malicious objects, as they rely on extensive databases that are not optimally distributed between remote servers and user devices.
Innovation Solution
A system and method that collect usage statistics on antivirus records, calculate a coefficient of effectiveness for each record, identify the most effective records, and strategically distribute them between user devices and a remote server, ensuring that the most effective records are stored on user devices while less effective ones are stored on the server.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the volume of antivirus data stored on user devices is increased to detect more malicious objects, then the detection capability is improved, but the available hard drive space decreases
Solution Approach 1:
The antivirus database is segmented into two parts: a compressed version stored on the user device and a full version stored on the remote server. The segmentation allows the device to maintain essential detection capabilities with minimal space while leveraging server resources for comprehensive coverage.
Solution Approach 2:
The solution moves from a single-dimension local storage model to a two-dimension distributed model involving both user devices and remote servers. This dimensional change enables simultaneous optimization of local space constraints and global detection effectiveness through coordinated access to compressed and full database versions.
2Volume of stationary object
If antivirus data is stored only on remote servers to save local space, then hard drive space is preserved, but access speed and reliability decrease
Solution Approach 1:
The antivirus database is pre-compressed and pre-distributed to user devices in a compressed format. This preliminary action ensures that essential detection data is immediately available locally for fast access, while the full database remains on the server for supplementary queries.
Solution Approach 2:
A distributed architecture acts as an intermediary between local storage constraints and remote server resources. The system coordinates access between locally stored compressed data and server-stored full data, optimizing both access speed and space utilization through intelligent data distribution.
3Reliability
If all antivirus records are distributed to user devices, then detection reliability is improved, but the complexity of data management increases
Solution Approach 1:
The antivirus database distribution is made dynamic rather than static. The system automatically adjusts what data resides locally versus on the server based on compression ratios, access patterns, and available space. This dynamic approach simplifies management by eliminating manual configuration while maintaining optimal detection reliability.
Solution Approach 2:
The system implements feedback mechanisms that monitor local storage usage, access patterns, and detection effectiveness. This feedback enables automatic optimization of the distributed database, adjusting the balance between local and server storage to maintain high detection reliability while minimizing management complexity and space requirements.
Data Source
AI summary
Disclosed are system and method for distributing most effective antivirus records to user devices. An exemplary method includes: collecting, by a server, statistics on the use of a plurality of antivirus records deployed on a plurality of user devices; calculating, by the server, a coefficient of effectiveness of each antivirus record based on the collected statistics on the use of the plurality of antivirus records by the plurality of user devices; identifying, by the server, a group of the plurality of antivirus records having the largest coefficients of effectiveness, wherein the group is a number of the plurality of antivirus records not exceeding a threshold value; and transmitting, by the server, the group of antivirus records to at least one of the plurality of user devices for storage in an antivirus database for use by an antivirus application of the at least one user device.