Differential Virus Scan Using Change Logs
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current antivirus scanning methods degrade computer performance by scanning all files on storage devices, which is time-consuming and resource-intensive, and often requires frequent manual updates, leading to performance degradation and increased network utilization.
Innovation Solution
Implementing incremental and differential scanning methods that utilize a file inclusion list to scan only files that have changed during a defined time period, using a change log to monitor file operations and update scan lists, thereby reducing the number of files to be scanned and minimizing performance impact.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all files on storage devices are scanned for viruses, then comprehensive virus detection is achieved, but computer performance degrades and scan operation time increases
Solution Approach 1:
The patent segments the file scanning process by dividing files into two categories: files that have changed since the last scan (newly modified, created, or deleted files) and files that have not changed. The system maintains a record of previously scanned files and only scans files that have changed, thereby segmenting the scanning workload to improve performance while maintaining detection reliability.
2Reliability
If scheduled scan operations scan all files on hard drives, then comprehensive virus protection is provided, but network utilization increases and network performance decreases
Solution Approach 1:
The patent extracts only the necessary subset of files (those that have changed since the last scan) from the complete set of files on hard drives. By taking out only the changed files for scanning, the system reduces network utilization and maintains network performance while still providing comprehensive virus protection through periodic full scans and continuous monitoring of file changes.
3Measurement precision
If manual updates of file lists are performed frequently, then scan accuracy is maintained, but user time and operational complexity increase
Solution Approach 1:
The system implements self-service by automatically monitoring file system changes and updating the scan target list without requiring manual user intervention. The patent uses file system event notifications and change tracking mechanisms to automatically identify newly modified, created, or deleted files and add them to the scan queue, eliminating the need for users to manually update file lists while maintaining scan accuracy.
Data Source
AI summary
Differential scanning is disclosed. A scan collection period is determined. A system is monitored to detect object events during the scan collection period, and a scan list may be updated with information regarding objects to be scanned, based on some of the object events. Objects are scanned based on the information in the scan list. Information regarding objects associated with object events occurring outside the scan collection period may be removed from the scan list.