Cloud-Based Virus Removal via Behavior Linker Scripts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional antivirus software is inadequate in completely removing Internet virus files, as they often spread through modifying browser settings and stealing user data, and their detection methods are not sufficiently precise, leading to inferior machine system security.
Innovation Solution
A method and system that determine virus family information based on scanned behavior, using both local and cloud-based behavior linker script libraries, to issue targeted virus removal instructions, including locking browser pages, modifying search settings, and removing associated content, enhancing precision and completeness of virus removal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional antivirus software performs behavior analysis and file deletion at the client, then the detection process is simple and fast, but the virus removal is incomplete and machine system security is inferior
Solution Approach 1:
The patent introduces a cloud-based virus treatment system as an intermediary between the client and the virus. The client sends virus behavior information to the cloud platform, which then generates and returns removal instructions. This intermediary approach allows complex cloud-based analysis and instruction generation while keeping the client-side software relatively simple, thereby improving virus removal completeness without excessively increasing client-side system complexity.
Solution Approach 2:
The patent transitions from a single-dimension client-side detection approach to a multi-dimensional system involving client behavior collection, cloud-based analysis, and instruction generation. By adding the cloud platform dimension, the system can perform comprehensive virus family identification and generate targeted removal instructions that address not only the detected virus but also related viruses in the same family, thereby improving removal completeness.
2Measurement precision
If cloud-based virus family identification is used, then virus removal precision is improved, but communication and data processing overhead increases
Solution Approach 1:
The patent implements preliminary action by having the cloud platform pre-establish the correspondence between virus families and their associated viruses. When a virus is detected, the system can quickly retrieve pre-prepared removal instructions rather than performing full analysis in real-time. This reduces the time loss associated with cloud communication and data processing while maintaining high identification precision.
3Measurement precision
If comprehensive virus behavior scanning is performed, then detection accuracy is improved, but scanning speed and system resource consumption decrease
Solution Approach 1:
The patent extracts only the essential virus behavior information needed for identification and sends it to the cloud platform, rather than transmitting complete scanning results. This extraction approach maintains detection accuracy by focusing on key behavioral indicators while improving scanning speed by reducing the amount of data that needs to be processed and transmitted.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention provides a method, apparatus, system, device and a computer storage medium for treating virus. A client reports a scan log to a cloud service platform, and/or reports virus family information to the cloud service platform after the virus family information is identified based on the scan log. The cloud service platform identifies the scan log to obtain virus family information, and/or issues the virus removal instruction corresponding to the virus family information to the client after receiving the virus family information from the client, for the client to execute the virus removal instruction. Compared with the method of simply performing the behavior analysis and deleting files by the client, it is more advantageous that the method of the present invention issues virus removal instructions regarding the virus family information from the cloud, the virus treating is more personalized and precise, and the security of the machine system is improved.