Infected File Quarantine via Parallel Scanning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Infected data files pose a significant challenge in distributed networked computing systems, causing damage and security lapses due to the difficulty in preventing their introduction and dissemination, especially with diverse file types and large volumes of data.
Innovation Solution
An infected file detection and quarantine system comprising a pre-scan server and a post-scan server, which includes receiving, scanning, and quarantine storage devices, uses virus scan applications to identify and isolate infected files, while maintaining data integrity and security by transferring uninfected files to an access storage device and providing real-time metrics.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virus scan applications are executed on all data files to detect infected files, then security reliability is improved, but processing time and system productivity deteriorate due to large volumes of diverse files
Solution Approach 1:
The patent segments the file scanning process into multiple parallel scanning operations, where different virus scan applications are distributed across multiple computing resources to simultaneously scan different portions of the data file set, thereby maintaining security reliability while improving processing throughput
Solution Approach 2:
The patent implements preliminary actions by creating a queue of data files awaiting scanning and pre-positioning virus scan applications on standby, allowing the system to immediately begin scanning operations when files become available, reducing idle time and improving overall processing efficiency
2Measurement precision
If multiple virus scan applications are used for different file types to improve detection accuracy, then measurement precision of infected files is improved, but device complexity increases
Solution Approach 1:
The patent implements universality by creating a unified queue management system and centralized coordination mechanism that handles multiple virus scan applications for different file types through a single integrated interface, maintaining high detection accuracy while reducing the perceived complexity for users
3Ease of operation
If all scanned data files are made accessible to users immediately, then ease of operation is improved, but security risk increases due to potential infected files
Solution Approach 1:
The patent extracts infected files from the accessible data set by implementing a quarantine mechanism that isolates detected infected files into a separate secure location, allowing users to access the majority of uninfected files normally while preventing any infected files from causing harm
Data Source
AI summary
Described in detail herein is an infected file detection and quarantine system. A pre-scan staging server can receive a set of data files. The pre-scan staging server can determine a type of each of the data files in the set. The pre-scan staging server can select a virus scan application for each type of data file in the set. The pre-scan staging server can detect whether the data files in the set are infected with a virus or malware in response to execution of the at least one virus scan application for each data file type. The post-scan staging server can receive the uninfected data files. The post-scan staging server can transmit a message including a link for retrieving the uninfected data files.