Antivirus Record Selection for Storage Optimization

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing antivirus systems face challenges in efficiently selecting and storing data for detecting malicious files without occupying excessive memory space, leading to potential decreases in available storage on user devices.

Innovation Solution

A system and method where a server maintains a database of malicious files, generates antivirus records for each file, calculates their effectiveness based on detection statistics, and transmits a set of the most effective records to client devices, reducing memory usage while ensuring reliable protection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the volume of data used for detection is increased to detect more malicious objects, then the detection capability is improved, but the available space on the hard drive of the user device decreases

Engineering Contradiction:

Improvedetection capabilityVSAvoidavailable storage space

Core Design Contradiction:

ReliabilityVSVolume of stationary object

Solution Approach 1:

The patent extracts only the most effective antivirus records from the complete set of detection data. By analyzing effectiveness metrics and selecting only those records that provide the highest detection value, the system removes redundant data from the antivirus library, thereby reducing storage requirements while preserving essential detection capabilities.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent changes the parameter of data selection from including all possible detection records to including only records above a certain effectiveness threshold. This parameter change optimizes the balance between detection capability and storage space by dynamically adjusting which records are retained based on their measured effectiveness in detecting malicious objects.

Inventive Principle:

Principle #35Parameter changes

2Volume of stationary object

If the volume of data used for detection is reduced to save storage space, then the available space on the hard drive increases, but the ability to detect malicious objects decreases

Engineering Contradiction:

Improveavailable storage spaceVSAvoiddetection capability

Core Design Contradiction:

Volume of stationary objectVSReliability

Solution Approach 1:

The patent implements a feedback mechanism where the effectiveness of each antivirus record is continuously measured and evaluated. This feedback information is used to dynamically adjust the composition of the antivirus library, ensuring that only records proven to be effective are retained. This closed-loop approach maintains detection capability while optimizing storage space.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The system dynamically adjusts the effectiveness threshold parameter based on storage constraints and detection requirements. By changing this parameter, the system can optimize the balance between maintaining sufficient detection capability and reducing the volume of stored antivirus data to free up hard drive space.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS9654486B2System and method for generating sets of antivirus records for detection of malware on user devices

Publication Date: 2017.05.16 AO KASPERSKY LAB

AI summary

Disclosed are systems and method for generating a set of antivirus records to be used for detection of malicious files on a user's devices. An exemplary method includes maintaining, by a server, a database of malicious files; generating, by the server, at least one antivirus record for each malicious file; calculating an effectiveness of each antivirus record by determining how many different malicious files were detected using each antivirus record; generating a set of most effective antivirus records; and transmitting, by the server, the set of most effective antivirus records to a client device.