Dynamic Anti-Virus Database Generation for Resource Optimization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing size of anti-virus (AV) databases due to new malware threats makes them less suitable for frequent updates, and existing methods for updating AV systems are inefficient as they are generated manually based on limited parameters without considering overall user security needs.
Innovation Solution
A method for dynamically generating AV databases based on user-specific parameters, including user ID, location, OS version, applications, and visited sites, to create an optimized database that reduces size and improves malware detection efficiency while minimizing resource usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If AV databases contain all malware signatures to ensure comprehensive detection, then detection coverage is improved, but database size increases making updates less suitable
Solution Approach 1:
The patent segments the comprehensive AV database into user-specific subsets based on collected parameters such as operating system, installed applications, browsing history, and system configuration. Each user receives a customized database containing only the malware signatures relevant to their specific environment, thereby reducing database size while maintaining detection coverage for their particular use case.
Solution Approach 2:
The patent applies local quality by tailoring the AV database content to each user's specific characteristics and requirements. Instead of providing a uniform database to all users, the system analyzes individual user profiles and generates customized databases with malware signatures specifically relevant to each user's system configuration and behavior patterns.
2Reliability
If AV databases are updated frequently to include new malware threats, then detection effectiveness is improved, but large database size makes frequent updates impractical
Solution Approach 1:
The patent implements a dynamic AV database update mechanism where the database is regenerated based on current user parameters and newly detected malware threats. The system continuously monitors user environment changes and malware intelligence, dynamically adjusting the database content to include only newly relevant signatures, enabling frequent updates without the burden of transferring large comprehensive databases.
Solution Approach 2:
The patent applies partial action by updating only the specific portions of the AV database that are relevant to each user based on their profile and current threat landscape. Instead of redistributing the entire comprehensive database during updates, the system generates and transmits only the necessary incremental changes tailored to each user's specific needs.
3Ease of manufacture
If manual generation of AV databases is used based on limited parameters, then implementation simplicity is maintained, but user security needs are not adequately addressed
Solution Approach 1:
The patent implements self-service by automatically collecting user parameters, analyzing security needs, and generating customized AV databases without requiring manual intervention. The system autonomously monitors user environment, identifies relevant malware threats, and generates optimized databases, combining automation with user-specific customization to maintain simplicity while improving adaptability.
Data Source
AI summary
A method for reducing the size of the AV database on a user computer by dynamically generating an AV database according to user parameters is provided. Critical user parameters that affect the content of the AV database required for this user are determined. The AV database for the single user is generated based on the user parameters. When the parameters of the user computer change or when new malware threats are detected, the user AV database is dynamically updated according to the new parameters and the new malware threats. The update procedure becomes more efficient since a need of updating large volumes of data is eliminated. The AV system, working with a small AV database, finds malware objects more efficiently and uses less of computer system resources.