Dynamic Virtual Environment Configuration for Malware Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional security systems using virtual environments for detecting unwanted data are unrepresentative of actual devices, leading to ineffective detection of malware and other unwanted programs.
Innovation Solution
A system and method for dynamically configuring a virtual environment on a first device based on properties of a second device, allowing unwanted data to be identified by replicating the second device's configuration and executing the data within this virtual environment for behavioral analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a virtual environment is used for detecting unwanted data, then detection capability is provided, but the virtual environment is unrepresentative of actual devices leading to ineffective detection
Solution Approach 1:
The patent applies dynamics by making the virtual environment configuration changeable and adaptable. The system dynamically configures the virtual environment based on properties of the target device, allowing the environment to evolve from a static, generic setup to a dynamic, device-specific representation that accurately reflects the actual execution context.
Solution Approach 2:
The patent changes parameters of the virtual environment by configuring it with specific properties of the target device (such as device type, operating system, hardware configuration). This transforms the virtual environment from a generic state to a state that mirrors the actual device parameters, improving representativeness and detection accuracy.
2Ease of operation
If a virtual environment is used for executing potentially unwanted data, then behavioral analysis can be performed, but the environment does not accurately reflect the actual device configuration
Solution Approach 1:
The patent applies copying by creating a virtual environment that replicates the configuration properties of the actual target device. Instead of using a generic virtual environment, the system copies relevant device properties (device type, OS, hardware specs) into the virtual environment, making it a faithful replica that accurately reflects the actual execution context while still providing isolation for safe behavioral analysis.
3Productivity
If conventional virtual environments are used for security detection, then malware execution is possible, but detection accuracy is reduced due to environmental mismatch
Solution Approach 1:
The patent applies preliminary action by pre-configuring the virtual environment with the target device's properties before executing the potentially unwanted data. This preparation ensures that when the malware executes, it encounters an environment that closely matches the actual device, thereby improving detection accuracy without sacrificing the speed benefits of virtualized execution.
Data Source
AI summary
A system, method, and computer program product are provided for dynamically configuring a virtual environment for identifying unwanted data. In use, a virtual environment located on a first device is dynamically configured based on at least one property of a second device. Further, unwanted data is identified, utilizing the virtual environment.