Network Integrated Protection Adapter for Early Virus Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current anti-virus solutions are ineffective in preventing the spread of malicious software as they typically detect viruses after they have entered a computer system, consume significant resources, and are not always 'on' due to high resource usage, leading to lengthy and resource-intensive virus search procedures.
Innovation Solution
A network integrated protection system with a media interface adapter that includes an integrated virus protection engine, capable of real-time virus detection and polymorphic virus protection, operating independently of the host processor to scan incoming data for virus signatures and opcode patterns, reducing the burden on central processing resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software-based anti-virus techniques are used to detect viruses after entry, then virus detection capability is provided, but system response time increases and computing resources are consumed
Solution Approach 1:
The patent applies preliminary action by implementing a hardware-based virus detection system that operates before viruses can enter the computer system. The media interface adapter includes a dedicated virus detection engine that proactively scans incoming data streams at the hardware level, identifying and blocking viruses before they reach the host processor or file system, thereby eliminating the time loss associated with post-entry detection.
Solution Approach 2:
The patent introduces an intermediary hardware component - the media interface adapter with integrated virus detection engine - that sits between the external media interface and the host processor. This intermediary device performs virus detection independently of the host processor, preventing viruses from reaching the system's core processing resources and thereby reducing response time without compromising detection capability.
2Reliability
If software-based anti-virus programs are run continuously, then virus protection is maintained, but computing resources are significantly consumed
Solution Approach 1:
The patent extracts the virus detection function from the host processor's software-based anti-virus programs and implements it as a dedicated hardware component within the media interface adapter. This extraction allows the system to maintain continuous virus protection without consuming the host processor's computing resources, as the hardware detector operates independently using its own dedicated processing capacity.
Solution Approach 2:
The hardware-based virus detection system is self-sufficient and does not require the host processor's software resources to function. The media interface adapter includes its own integrated detection engine that autonomously performs virus scanning and blocking operations, thereby maintaining protection while avoiding the significant computing resource consumption associated with running continuous software-based anti-virus programs.
3Reliability
If traditional virus search procedures are used, then virus detection is performed, but processing time increases due to disk accesses and compute intensive operations
Solution Approach 1:
The patent replaces the mechanical/software-based virus search procedures with a hardware-based detection system. Instead of using software programs that perform sequential disk accesses and compute-intensive string matching, the hardware detector uses dedicated circuitry to scan incoming data streams at the hardware level, dramatically reducing processing time and improving productivity while maintaining reliable virus detection.
Data Source
AI summary
A virus detection mechanism is described in which virus detection is provided by a network integrated protection (NIP) adapter. The NIP adapter checks incoming media data prior to it being activated by a computing device. The NIP adapter operates independently of a host processor to receive information packets from a network. This attribute of independence allows NIP anti-virus (AV) techniques to be “always on” scanning incoming messages and data transfers. By being independent of but closely coupled to the host processor, complex detection techniques, such as using check summing or pattern matching, can be efficiently implemented on the NIP adapter without involving central processor resources and time consuming mass storage accesses. The NIP adapter may be further enhanced with a unique fading memory (FM) facility to allow for a flexible and economical implementation of polymorphic virus detection.