Malware Detection System Using Pre-Stored Verdicts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face risks when downloading files from the internet due to the potential presence of malware, and existing solutions require extensive scanning by antivirus software, which is resource-intensive and not always efficient.
Innovation Solution
A malware detection system that uses previously stored antivirus verdicts to classify files as safe, generating a certification indicator to confirm the safety of files and reducing the need for repeated scans by extrapolating safety from other files on the same resource or website.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If antivirus software scans every file to detect malware, then file safety detection reliability is improved, but computing resource consumption increases
Solution Approach 1:
The system performs preliminary scanning of files at upload time to Internet resources, storing antivirus verdicts in advance. When users request files, the system retrieves pre-stored verdicts instead of performing new scans, thus maintaining high detection reliability while minimizing real-time computing resource consumption.
Solution Approach 2:
The system creates copies of antivirus verdicts and stores them in a database associated with Internet resources. These verdict copies are then retrieved and presented to users without requiring the original scanning process to be repeated, reducing computing resource usage while maintaining detection accuracy.
2Measurement precision
If antivirus software scans every file request, then malware detection accuracy is improved, but processing time increases
Solution Approach 1:
Antivirus scanning is performed in advance when files are uploaded to Internet resources, and verdicts are stored in a database. When users request files, the system immediately retrieves pre-computed verdicts from the database, eliminating the need for repeated scanning and thus reducing processing time while maintaining detection accuracy.
Solution Approach 2:
The system automatically retrieves and presents stored antivirus verdicts from the database without requiring real-time scanning. This self-service approach using pre-stored information significantly reduces processing time while maintaining the accuracy of malware detection.
3Reliability
If certification indicators are displayed for all files, then user confidence in safe downloads is improved, but system complexity increases
Solution Approach 1:
The system extracts and displays only the essential certification indicator (antivirus verdict) from the complex scanning process. This simplified indicator is presented to users to convey file safety information clearly, maintaining user confidence while avoiding the complexity of displaying detailed scan results or technical parameters.
Solution Approach 2:
The system uses an intermediary database to store and manage antivirus verdicts, and an intermediary interface to present certification indicators to users. This intermediary layer simplifies the interaction between the complex scanning system and users, maintaining reliability while reducing perceived system complexity.
Data Source
AI summary
In some implementations, a method includes receiving, by a malware detection system, a request for a certification user interface element for a file to be served in an Internet resource, wherein the file is a file that has previously been classified as not containing malware by the malware detection system, and wherein the certification user interface element certifies that the file has been classified by the malware detection system as not containing malware, determining, based on the request, that the file is available for download from an Internet resource, and storing data that identifies the Internet resource as a location where a malware-free file is available for download.