Virus Detection Using Cyclic Redundancy Check Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing number of computer viruses necessitates more frequent and time-consuming scans to maintain computer systems free from viruses, making current scanning methods burdensome.
Innovation Solution
A method that uses cyclic redundancy checks (CRCs) to quickly identify potentially malicious code by comparing file headers with stored viral CRCs, followed by a more comprehensive check if a match is found, thereby reducing the time required for virus detection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If comprehensive virus scanning is performed to ensure system safety, then detection reliability is improved, but scanning time increases
Solution Approach 1:
The virus scanning process is divided into multiple stages: first scanning file headers for viral CRCs, then scanning file bodies only when necessary. This segmentation allows the system to perform quick header checks on all files while reserving comprehensive body scanning for only those files that potentially contain viruses, thus maintaining high detection reliability while significantly reducing overall scanning time.
Solution Approach 2:
The system performs preliminary CRC calculations on file headers before comprehensive file scanning. By pre-checking headers and calculating CRCs in advance, the system can quickly identify potentially infected files and prioritize them for thorough scanning, avoiding time-consuming complete scans of all files when they are likely clean.
2Reliability
If frequent system scanning is performed to maintain virus-free status, then system safety is improved, but maintenance burden increases
Solution Approach 1:
The scanning system dynamically adjusts its behavior based on detected conditions. When viral CRCs are found in file headers, the system automatically triggers comprehensive file body scanning and user notification. When no viral CRCs are detected, the system performs only quick header checks. This dynamic adaptation maintains system safety while reducing maintenance burden by avoiding unnecessary comprehensive scans during normal operation.
Solution Approach 2:
The system uses feedback from CRC database comparisons to determine next actions. When a viral CRC is detected in a file header, the system feeds back to trigger comprehensive scanning and user alerts. When no matches are found, the feedback loop allows the system to continue with quick header-only scans or exit the scanning process, thereby maintaining security while minimizing operational disruption.
3Measurement precision
If complete file scanning is performed to detect all viral code, then detection accuracy is improved, but processing speed decreases
Solution Approach 1:
The scanning process is segmented into header scanning and body scanning phases. Header scanning is performed on all files to quickly identify potential viruses through CRC comparison. Body scanning is performed only on files that pass the header check, ensuring high detection accuracy for actual viruses while maintaining fast processing speed by avoiding unnecessary body scans of clean files.
Solution Approach 2:
The system applies partial scanning (header only) to the majority of files that are likely clean, and excessive/comprehensive scanning (header and body) only to files that show signs of infection. This partial action approach maintains high processing speed for most files while ensuring thorough detection accuracy for the minority of potentially infected files.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach significantly reduces the time needed for virus scanning by focusing on unique file headers and allowing for targeted, efficient detection and potential removal of malicious code, improving system maintenance efficiency.
Implementation Method 1
determining a (Cyclic Redundancy Check) CRC of a first portion of the computer readable code, performing an initial determination to determine whether the CRC of the first portion of the computer readable code is present in a database of CRCs
Data Source
AI summary
A method of detecting malicious code in computer readable code includes performing an initial determination to determine whether a first portion of the computer readable code may potentially have malicious code and if it is determined that the computer readable code potentially has malicious code, performing another determination to determine whether a second portion not including the first portion of the computer readable code has malicious code.