Server-Assisted Antimalware Client Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional antimalware solutions face challenges in efficiently detecting and remediating malware on host devices, particularly on resource-constrained mobile devices, due to the need for frequent updates and the performance degradation caused by resource-heavy antimalware tools, which can impact device performance and scalability.
Innovation Solution
A server-assisted antimalware system where a thin antimalware client on the host device performs preliminary assessments and escalates resource-intensive tasks to a remote antimalware support system, utilizing a threat intelligence system for comprehensive malware detection and remediation, optimizing network bandwidth and reducing the burden on the host device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional host-based antimalware tools are installed with full functionality, then malware detection and remediation capability is improved, but device performance and resource utilization deteriorate
Solution Approach 1:
The patent segments the antimalware system into a thin client component on the host device and a server component on remote servers. The thin client handles local malware detection and communication, while resource-intensive analysis, database storage, and remediation operations are performed on remote servers. This segmentation allows the host device to maintain security functionality without bearing the full resource burden.
Solution Approach 2:
The patent introduces a server as an intermediary between the thin client and the malware threat. The server acts as a mediator that receives malware samples and analysis requests from clients, performs comprehensive analysis using its resources, and returns results to clients. This intermediary approach enables distributed security protection without requiring each client to have full antimalware capabilities.
2Reliability
If resource-intensive antimalware tools are deployed on mobile devices, then malware remediation effectiveness is improved, but scalability and ease of operation worsen
Solution Approach 1:
The system segments remediation functionality into server-based components that can be centrally updated and managed. The thin client on mobile devices maintains a minimal footprint while relying on the server for comprehensive remediation operations. This enables scalable deployment across numerous devices without proportionally increasing resource requirements on each device.
Solution Approach 2:
The server component provides universal antimalware services to multiple clients simultaneously, handling detection, analysis, and remediation for diverse malware threats. This multi-functional server architecture allows a single deployment to protect numerous devices across different platforms, improving scalability and reducing per-device resource requirements.
3Measurement precision
If frequent updates of remediation tools and virus definition files are performed, then malware detection accuracy is improved, but network bandwidth consumption and device complexity increase
Solution Approach 1:
The patent merges the update management functionality into the server component, where virus definition files and remediation tools are centrally stored and managed. The thin client receives updates only when necessary through efficient communication protocols, reducing redundant network traffic. This consolidation allows frequent updates to be distributed efficiently without proportionally increasing network bandwidth consumption on each device.
4Reliability
If comprehensive antimalware functionality is implemented locally, then malware detection capability is improved, but device complexity and resource requirements worsen
Solution Approach 1:
The patent extracts complex antimalware functionality from the host device and relocates it to remote servers. The thin client retains only essential functions for malware detection initiation and communication with the server. This extraction reduces device complexity while maintaining comprehensive detection capability through server-based analysis and database resources.
Data Source
AI summary
An antimalware support system is provided to support one or more host-based antimalware clients. A query is received from a particular host device that identifies a file detected by an antimalware tool local to the particular host device. Reputation data is determined for the file, and a response to the query is sent to the particular host device. The query response includes the reputation data determined for the file.