Community Scan Anti-Virus Rating Database Feedback
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing anti-virus systems consume significant processing power and bandwidth due to the need to repeatedly scan payloads for malicious code, as their databases are incomplete and rely on external sources for updates, leading to inefficiencies in malicious payload detection.
Innovation Solution
A community scan arrangement that includes an anti-virus detection system with a feedback module to share verified scanning results with a rating database, reducing the need for repeated scans by utilizing data from multiple users, thereby updating the database with known malicious payloads and minimizing unnecessary scanning.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the anti-virus engine scans each payload every time it is encountered, then the detection accuracy is improved, but the processing power and bandwidth consumption increase
Solution Approach 1:
The system performs preliminary scanning of payloads and stores the results in a rating database before actual user encounters. When a payload is first encountered, the anti-virus engine scans it and stores the scanning result (safe or malicious) in the rating database. Subsequent encounters with the same payload can then use the pre-computed result from the database, avoiding repeated scanning operations and reducing processing power consumption while maintaining detection accuracy.
2Reliability
If the rating database is updated with more malicious code information, then the detection capability is improved, but the bandwidth and processing power required for verification increase
Solution Approach 1:
The system merges the scanning functions of multiple gateways and anti-virus engines into a centralized rating database. Instead of each gateway independently verifying and maintaining its own database of malicious codes, the centralized database consolidates scanning results from multiple sources. This sharing mechanism allows all gateways to benefit from the collective detection capability without each one needing to perform redundant verification, thus improving overall detection capability while reducing total bandwidth and processing power consumption.
3Use of energy by moving object
If the anti-virus engine queries the rating database for each payload, then the scanning bandwidth is reduced, but the database completeness remains limited
Solution Approach 1:
The system implements a feedback mechanism where scanning results from multiple gateways and anti-virus engines are continuously fed back into the centralized rating database. When any gateway encounters and scans a new payload, the result is stored in the database, making it available for all other gateways. This feedback loop ensures the database is continuously updated and expanded with new malicious code information from the community, improving database completeness while allowing individual gateways to reduce their scanning bandwidth by querying the ever-growing database.
Data Source
AI summary
An apparatus for updating a rating database arrangement including a first gateway and a first anti-virus detection arrangement configured to be activated by the first gateway when the first gateway intercepts a Uniform Resource Locator (URL) request. The first anti-virus detection arrangement is configured to include at least an anti-virus engine, the anti-virus engine configured at least for scanning a URL attributable to the URL request. The anti-virus engine is also configured for generating a scanning result for the URL attributable to the URL request, the scanning result configured to include one of a safe scanning result and an other than safe scanning result. The first anti-virus detection arrangement further includes a feedback module, the feedback module configured at least for extracting the other than safe scanning result from the anti-virus engine and sending the other than safe scanning result to the rating database arrangement.