Remote Antimalware Remediation via Thin Client Offloading
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional antimalware solutions face challenges in efficiently detecting and remediating malware on host devices, particularly on resource-constrained mobile devices, due to the high processing and data overhead, and the need for frequent updates, which can degrade device performance and are difficult to scale in large networks.
Innovation Solution
A remote antimalware support system that offloads resource-intensive malware detection and remediation tasks from host devices to a centralized server, using a thin antimalware client with minimal local functionality, which communicates with a comprehensive antimalware support system for threat intelligence, scanning, and remediation, optimizing network bandwidth and reducing the burden on mobile devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional host-based antimalware tools are deployed on mobile devices, then malware detection capability is improved, but device performance deteriorates due to high processing overhead
Solution Approach 1:
The patent extracts the resource-intensive malware detection and remediation functionality from the host device and relocates it to a remote server. The host device retains only a lightweight client that communicates with the remote server, thereby eliminating the performance overhead while maintaining detection capability.
Solution Approach 2:
The patent introduces a remote server as an intermediary between the host device and the malware detection processes. The server handles all computationally intensive tasks including virus definition updates, scanning, and remediation, acting as a mediator that protects the host device from resource consumption.
2Reliability
If comprehensive antimalware functionality is installed on host devices, then malware remediation effectiveness is improved, but device complexity increases
Solution Approach 1:
The patent extracts comprehensive antimalware functionality including virus definition databases, scanning engines, and remediation tools from the host device and concentrates them on a remote server. The host device only maintains a simple client application, dramatically reducing device complexity while preserving full remediation capability.
Solution Approach 2:
The remote server provides universal antimalware services to multiple host devices simultaneously, handling detection, analysis, and remediation for the entire network. This multi-functional approach eliminates the need for each device to maintain its own complete antimalware suite.
3Measurement precision
If frequent updates of virus definition files and remediation tools are performed on host devices, then malware detection accuracy is improved, but network bandwidth consumption increases
Solution Approach 1:
The patent merges the update management for multiple host devices into a single centralized process on the remote server. The server maintains updated virus definition files and remediation tools, distributing them only when changes occur, thereby reducing redundant network traffic while maintaining detection accuracy across all devices.
Solution Approach 2:
The remote server maintains a single master copy of virus definition files and remediation tools, creating lightweight local copies on host devices only when necessary. This approach minimizes network bandwidth consumption by avoiding frequent full updates while ensuring detection accuracy through centralized version control.
Data Source
AI summary
An opportunity to assist with remediation of a file at a remote particular host device is identified. One or more remediation techniques are identified that can be applied to assist with remediation of the file at the particular host device. In one aspect, one or more remediation scripts are identified from a plurality of remediation scripts for remediation of the file and provided to the particular host device for execution on the particular host device. In another aspect, a remediation tool is identified and launched on a computing device remote from the particular host device with operations of the remediation tool applied to resources of the particular host device. In another aspect, at least a portion of the remediation techniques are remotely initiated to be performed locally at the particular host device.