Dynamic Resource Allocation for Security Threat Processing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current malware detection methods in cloud computing environments are inefficient due to the exponential growth of threats, limited capabilities of antivirus companies, and the need for timely updates, which are hindered by the reliance on user expertise and manual verification processes.

Innovation Solution

A system that classifies users based on their expertise in computer security, dynamically allocates computing resources, and utilizes user verdicts to update antivirus databases and configure detection settings, ensuring that more resources are allocated to users with higher expertise for threat detection and processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual verification processes are used to verify user verdicts, then reliability of threat detection is improved, but productivity decreases due to time-consuming verification

Engineering Contradiction:
Improvereliability of threat detectionVSAvoidspeed of threat processing
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system changes the parameter of verification approach from manual to automated based on user role classification. Expert users have their verdicts accepted directly without manual verification, while regular users require automated verification processes, thereby resolving the contradiction between reliability and productivity through parameter change in the verification mechanism

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The system segments users into different roles (expert users vs. regular users) based on their expertise level. This segmentation allows different processing procedures to be applied to different groups, enabling expert users to provide immediate verdicts while regular users undergo automated verification, thus maintaining both reliability and productivity

Inventive Principle:
Principle #1Segmentation

2Ease of operation

If computing resources are allocated uniformly to all users, then ease of operation is improved, but productivity decreases due to inefficient resource utilization

Engineering Contradiction:
Improvesimplicity of resource allocationVSAvoidefficiency of threat processing
Core Design Contradiction:
Ease of operationVSProductivity

Solution Approach 1:

The system applies local quality by allocating different computing resource levels to different user roles. Expert users receive higher resource allocation for immediate verdict acceptance, while regular users receive resources for automated verification processes. This localized differentiation optimizes productivity while maintaining operational simplicity through automated role-based allocation

Inventive Principle:
Principle #3Local quality

3Productivity

If user verdicts are accepted without verification, then productivity is improved, but reliability deteriorates due to false positives

Engineering Contradiction:
Improvespeed of threat detectionVSAvoidaccuracy of threat identification
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system dynamically adjusts the verification process based on user role. For expert users, the system dynamically accepts verdicts without verification to maximize productivity. For regular users, it dynamically applies automated verification to maintain reliability. This dynamic adaptation resolves the contradiction by making the verification mechanism flexible rather than static

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS8214905B1System and method for dynamically allocating computing resources for processing security information
Publication Date: 2012.07.03 AO KASPERSKY LAB
  • US8214905B1 patent drawing
  • US8214905B1 patent drawing
  • US8214905B1 patent drawing

AI summary

Disclosed are systems, methods and computer program products for dynamically allocating computing resources for processing security information. In one example, the system receives from an antivirus application deployed on a user's computer information about user's actions related to the security of said computer. The system analyzes the received information to determine user's level of expertise in the field of computer security. The system then classifies the user into one of two or more different roles based on the determined level of expertise. The system automatically selects, based on the user's role, configuration setting of the antivirus application for collecting information about security threats detected by the user. The system also automatically allocates and configures, based on the user's role, computing resources and services for processing information collected by the antivirus application deployed on the user's computer about security threats detected by the user.