Filename-Based Malware Pre-Scanning for Storage Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data storage systems face delays and reduced antivirus throughput due to real-time malware scanning, which can be inefficient when handling large numbers of files, especially in scenarios where files are accessed sequentially.
Innovation Solution
Implementing filename-based malware pre-scanning, where files in a sequence are pre-scanned when one file is accessed, allowing subsequent files in the sequence to be accessed without additional delays, and utilizing idle antivirus resources for batch scanning, thereby reducing computing resources and power consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If real-time malware scanning is performed for each file access, then file security is ensured, but file access delays increase and antivirus throughput decreases
Solution Approach 1:
The patent implements pre-scanning of files based on filename patterns before actual file access occurs. When a file matching a predefined pattern (e.g., sequential naming conventions) is accessed, the system proactively scans not only the current file but also subsequent files in the sequence, performing the security check in advance so that subsequent accesses experience no delay.
Solution Approach 2:
The patent segments the file scanning process by identifying sequential file groups based on filename patterns. Instead of treating each file access independently, the system groups related files (e.g., video frames, document sections) and scans them as a batch, reducing redundant scanning operations and improving overall throughput.
2Reliability
If real-time malware scanning is performed for each file access, then file security is ensured, but antivirus throughput decreases
Solution Approach 1:
The system performs pre-scanning during idle periods or in advance of anticipated file accesses. By proactively scanning files before they are accessed and utilizing idle antivirus resources, the system increases overall antivirus throughput while maintaining security, as the scanning work is distributed over time rather than concentrated during access moments.
Solution Approach 2:
The patent enables continuous antivirus operation by implementing pre-scanning that keeps the antivirus engine actively working during periods when files are not being accessed. This continuous useful action increases throughput by utilizing idle resources, rather than having the antivirus engine remain idle until real-time scanning is triggered.
3Reliability
If sequential files are scanned individually upon access, then each file is securely verified, but computing resources are wasted on redundant scanning
Solution Approach 1:
The patent merges the scanning operations for sequential files into a single batch scanning process. When files with sequential naming patterns are accessed, the system combines them into a group and scans the entire group together, eliminating redundant scanning of files that are likely to be accessed in sequence and reducing overall computing resource consumption.
Data Source
AI summary
Filename-based malware pre-scanning is described herein. A method as described herein can include establishing sequential malware scanning for respective files in a first directory of a file system according to filenames of the respective files; comparing an elapsed time since a previous malware scan for a first file of the respective files in the first directory having a first filename in a filename sequence to a scan age threshold associated with a scheduled malware scan task for the first directory; and, in response to the elapsed time since the previous malware scan for the first file being determined to be less than the scan age threshold, removing the scheduled malware scan task with respect to the first file and at least one second file of the respective files in the first directory having respective second filenames in the filename sequence.