NAS Malware Scan Status Data Structure

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional malware scanning techniques in data storage systems, such as NAS platforms, are inefficient, particularly when dealing with large files and duplicates, leading to increased network bandwidth usage, computing resource consumption, and prolonged user wait times.

Innovation Solution

Implementing a scan status data structure that stores file identifiers and malware scan results, allowing the system to bypass redundant scans for duplicate files by referencing the scan status of previously scanned files, thereby reducing the need for duplicate malware scans and enhancing AVS throughput.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional malware scanning techniques are used to scan all files, then malware protection is maintained, but network bandwidth usage and computing resource consumption increase significantly

Engineering Contradiction:
Improvemalware protectionVSAvoidnetwork bandwidth usage and computing resource consumption
Core Design Contradiction:
ReliabilityVSLoss of energy

Solution Approach 1:

The system performs preliminary actions by scanning files only once and storing the scan status in a data structure. Subsequent scans reference the stored status instead of performing full scans again, preventing redundant scanning operations and reducing network bandwidth and computing resource consumption while maintaining malware protection.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system creates a copy of the scan status information and stores it in a data structure. When a file needs to be scanned again, the system references this copied status information rather than performing a complete scan, thereby reducing the computational and network resources required while maintaining security.

Inventive Principle:
Principle #26Copying

2Reliability

If duplicate files are scanned separately, then malware detection is ensured, but user wait times increase due to redundant scanning

Engineering Contradiction:
Improvemalware detectionVSAvoiduser wait times
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs the scan action once for each unique file and stores the result. When duplicate files are accessed, the system references the pre-stored scan status, eliminating redundant scanning operations and significantly reducing user wait times while ensuring malware detection through the stored results.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system creates and stores a copy of the scan status for each file. When duplicate files are encountered, the system references this copied status information, avoiding redundant scanning and reducing user wait times while maintaining reliable malware detection through the stored scan results.

Inventive Principle:
Principle #26Copying

3Productivity

If a scan status data structure is implemented, then redundant scans are avoided and throughput increases, but device complexity increases

Engineering Contradiction:
ImproveAVS throughputVSAvoiddata structure management
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system segments the scan status information into a dedicated data structure that stores file identifiers and scan results separately. This segmentation allows the main scanning process to remain simple while the data structure handles the complexity of tracking and referencing scan statuses, thereby increasing throughput without proportionally increasing overall system complexity.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS10848559B2Malware scan status determination for network-attached storage systems
Publication Date: 2020.11.24 EMC IP HLDG CO LLC
  • US10848559B2 patent drawing
  • US10848559B2 patent drawing
  • US10848559B2 patent drawing

AI summary

Malware scan status determination for network-attached storage systems is provided herein. A data storage system as described herein can include a memory that stores computer executable components and a processor that executes computer executable components stored in the memory. The computer executable components can include a data creation component that creates a scan status data structure associated with a network-attached storage (NAS) device, the scan status data structure comprising respective records that indicate a file identifier and a malware scan status for respective files stored on the NAS device, and a data update component that updates a record in the scan status data structure corresponding to a target file stored on the NAS device in response to receiving a malware scan result for the target file.