Opportunistic Malware Patching via Vulnerability Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing antivirus software does not provide updates that close vulnerabilities exploited by malware, leading to reinfection of computers even with up-to-date software, as users often fail to install necessary patches, resulting in exposure to malware.
Innovation Solution
A system and method that opportunistically installs software updates on a computer to close identified vulnerabilities by matching malware with corresponding patches, using a database lookup or remote analysis to determine the necessary update and install it automatically.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If antivirus software scans for and removes malware, then malware detection capability is improved, but the computer remains vulnerable to reinfection through unpatched security holes
Solution Approach 1:
The system performs preliminary action by automatically installing security patches to close vulnerabilities before malware can exploit them. When a vulnerability is detected or predicted, the corresponding patch is installed in advance, preventing potential infections before they occur.
Solution Approach 2:
The system implements feedback by continuously monitoring for vulnerabilities, analyzing malware patterns, and automatically responding by installing patches. The system uses feedback loops where detected threats inform subsequent patch installation decisions, creating a dynamic defense mechanism that adapts to emerging threats.
2Object-affected harmful factors
If users manually install security patches, then vulnerability closure is achieved, but user effort and time consumption increase
Solution Approach 1:
The system applies self-service by automatically detecting vulnerabilities, selecting appropriate patches, and installing them without requiring user intervention. The system manages the entire patch deployment process autonomously, freeing users from manual security maintenance tasks while ensuring timely vulnerability closure.
Solution Approach 2:
The system performs preliminary action by proactively identifying and installing security patches before users need to take action. By anticipating security needs and automatically deploying patches in advance, the system eliminates the need for users to manually track and install updates.
3Object-affected harmful factors
If software updates are automatically installed, then vulnerability protection is improved, but system resource consumption and update management complexity increase
Solution Approach 1:
The system uses feedback mechanisms to intelligently manage automatic updates by monitoring system state, vulnerability severity, and resource availability. This feedback-driven approach allows the system to make contextual decisions about which patches to install and when, reducing unnecessary updates while maintaining security.
Solution Approach 2:
The system applies partial action by selectively installing only the specific patches needed to address detected vulnerabilities rather than applying all available updates. This targeted approach reduces resource consumption and management complexity while maintaining adequate security protection.
Data Source
AI summary
The present invention provides a system, method, and computer-readable medium that opportunistically install a software update on a computer that closes a vulnerability that existed on the computer. In accordance with one aspect of the present invention, when antivirus software on a computer identifies malware, a method causes a software update that closes the vulnerability exploited by the malware to be installed on the computer. The method includes identifying the vulnerability exploited by the malware, using a software update system to obtain a software update that is configured to close the vulnerability; and causing the software update to be installed on the computer where the vulnerability exists.