Asynchronous File Load Security for Process Initialization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The serialization of file load events during process initialization due to security operations, such as malware scanning, leads to computer performance issues as read operations are temporarily blocked.
Innovation Solution
A method that processes computer system events asynchronously, allowing file loads and security operations to occur concurrently without blocking read and load events, thereby preventing the serialization of file load events.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security operations are performed on files during process initialization, then malware detection capability is improved, but read operation speed deteriorates due to temporary blocking
Solution Approach 1:
The patent applies preliminary action by performing security operations on files before the process fully initializes. The security agent scans files during the loading phase, allowing potential threats to be detected and blocked before they can execute malicious code. This proactive approach improves malware detection capability while managing the timing of security checks to minimize impact on overall system performance.
2Reliability
If security operations are performed during process initialization, then security coverage is improved, but system performance deteriorates due to serialization of file load events
Solution Approach 1:
The patent performs security operations during the file loading phase before process threads are fully created and initialized. By conducting scans preliminarily on loaded files, the system ensures security coverage is maintained while avoiding the performance penalty of blocking threads during execution. The security agent processes files as they are loaded into memory, allowing subsequent thread operations to proceed without waiting for security checks.
3Measurement precision
If read operations are blocked during security scanning, then malware detection accuracy is improved, but file load time increases
Solution Approach 1:
The patent performs security scanning as a preliminary action during the file loading process itself, rather than blocking read operations to perform scans afterward. The security agent analyzes file contents while they are being loaded into memory, allowing the system to maintain accurate malware detection by examining complete files while minimizing additional load time. This approach detects malware with high accuracy by analyzing full file contents without requiring separate blocking phases.
Data Source
AI summary
In a system and method for processing computer system events asynchronously for software security operations, a computer memory is configured for a read operation by a computer process. The computer process loads, based on a first event occurring during the read operation, at least one file in the computer memory. At least one thread of the computer process is generated. An execution of the at least one thread of the computer process is delayed based on a second event occurring after the first event. A security operation is performed on the process contemporaneously with the loading of the file in the computer memory and the blocking of the execution of the at least one thread of the computer process. The process is either un-delayed on completion of the previous security operation or other security operations performed on that process.