Malware Protection for Limited Resource Computers via Signature Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Limited resource computers, such as PDAs and smartphones, are vulnerable to malware due to their limited storage, processing power, and bandwidth constraints, making it difficult to implement effective malware detection and prevention mechanisms like signature-based antivirus software used on general-purpose computers.
Innovation Solution
A system where a general-purpose computer filters and scans application data for malware before transmitting it to a limited resource computer, using antivirus software to generate and match signatures, and reporting the results, thereby preventing malware from infecting the limited resource computer, and also scanning installed applications on the limited resource computer for malware by comparing their signatures with an up-to-date database.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If signature-based antivirus software is implemented on limited resource computers, then malware detection capability is improved, but storage space and processing power are excessively consumed
Solution Approach 1:
The system divides the malware detection functionality into two segments: the limited resource computer generates and transmits file signatures, while the general purpose computer performs the actual malware detection using a signature database. This segmentation allows the limited resource computer to maintain minimal storage requirements while still achieving malware detection capability through the distributed architecture.
Solution Approach 2:
The patent introduces an intermediary general purpose computer that acts as a mediator between the limited resource computer and the malware signature database. The intermediary performs the computationally intensive tasks of maintaining and querying the signature database, thereby protecting the limited resource computer from storage and processing constraints while enabling comprehensive malware detection.
2Reliability
If frequent antivirus software updates are performed on limited resource computers, then malware detection accuracy is improved, but bandwidth consumption is excessively increased
Solution Approach 1:
The patent extracts the bandwidth-intensive task of maintaining and updating the signature database from the limited resource computer and relocates it to the general purpose computer. The limited resource computer only needs to transmit minimal file signature data, while the general purpose computer handles frequent updates and maintenance of the comprehensive signature database, thereby achieving accurate malware detection with minimal bandwidth consumption on the constrained device.
3Reliability
If comprehensive malware scanning is performed on limited resource computers, then malware detection capability is improved, but processing power is excessively consumed
Solution Approach 1:
The system segments the malware detection workload by assigning different computational tasks to different devices. The limited resource computer performs only the lightweight task of generating file signatures using hash functions, while the general purpose computer performs the computationally intensive task of comparing signatures against the comprehensive signature database and executing malware detection algorithms, thereby enabling effective malware scanning without exceeding the processing power constraints of the limited resource computer.
Data Source
AI summary
The present invention is directed to a system and methods for protecting a limited resource computer from malware. Aspects of the present invention use antivirus software on a general purpose computer to prevent malware from infecting a limited resource computer. Typically, antivirus software on the general purpose computer is kept “up-to-date” with the most recent software updates. When a connection is established between the limited resource computer and the general purpose computer, a signature of each application installed on the limited resource computer is transmitted to the general purpose computer. Then antivirus software on the general purpose computer compares the received signatures to known malware. Finally, the results of the scan are reported to the limited resource computer.