File Scanning Optimization via Input-Output Hints
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The time-consuming process of scanning files for malicious code is hindered by the slow speed of media input-output operations, as it is difficult to predict which file portions need to be examined, leading to inefficient use of dynamic memory and decreased performance in anti-malicious code scanning.
Innovation Solution
A scanning optimization manager creates input-output hints based on accessed file portions during initial scans, allowing for optimized subsequent scans by reading only relevant parts into dynamic memory, disabling unnecessary features like read-ahead and caching, and improving file organization and multi-threading.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the entire file is read into dynamic memory during scanning, then the scanning can be performed, but the I/O time is excessive and performance decreases
Solution Approach 1:
The patent divides the file into multiple segments or portions, and only reads the specific portions that contain malicious code signatures into dynamic memory for scanning. This segmentation approach avoids reading the entire file, thereby reducing I/O time while maintaining scanning effectiveness.
Solution Approach 2:
The patent performs preliminary analysis to identify which portions of the file are relevant to the scanning task before actually reading them into memory. By determining the necessary file portions in advance, the system avoids unnecessary I/O operations and focuses resources only on the relevant segments.
2Loss of time
If only relevant portions of the file are read into dynamic memory, then I/O time is reduced, but it is difficult to predict which portions need to be examined
Solution Approach 1:
The patent implements a feedback mechanism where information from previous scanning operations is used to inform and optimize future scanning operations. By analyzing patterns from past scans, the system learns which file portions are likely to contain malicious code and prioritizes reading those portions first, reducing uncertainty and improving prediction accuracy.
3Quantity of substance
If the scanning system reads only necessary file portions, then memory usage is optimized, but the ability to handle unknown malicious code patterns is reduced
Solution Approach 1:
The patent employs dynamic adjustments to the scanning process based on the specific characteristics of each file being scanned. The system adapts its reading strategy in real-time, modifying which portions are read into memory based on file type, size, and detected patterns, thereby optimizing memory usage while maintaining detection versatility for various malicious code types.
Data Source
AI summary
A scanning optimization manager scans files for malicious code. The scanning optimization manager creates listings of the portions of scanned files accessed during the scanning. The scanning optimization manager proceeds to utilize these listings of accessed portions of files as I/O hints to optimize subsequent scans of the files for malicious code.