Apparatus and method for updating internet-based malware detection engine using scaling control of virtual machine

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing Internet-based malware detection systems face challenges in updating malware detection engines without interrupting their operation, especially when using virtual machines, as updates require resource efficiency and continuous functionality.

Innovation Solution

A method and apparatus for updating an Internet-based malware detection engine using virtual machine scaling, involving the creation of scaling and update groups, snapshot events, and triggering scale-out and scale-in events to maintain continuous operation during updates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the malware detection engine is updated by replacing virtual machines, then updated malware information is reflected, but the operation of the malware detection engine is interrupted

Engineering Contradiction:

Improvecontinuous operation of malware detection engineVSAvoidability to reflect updated malware information

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system creates a snapshot of the current virtual machine state before updating, preserving the running instance while allowing a new updated version to be prepared and deployed. This preliminary action of saving the current state enables seamless transition without interrupting service.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system creates a copy of the virtual machine image through snapshot functionality, allowing the original running instance to continue while an updated copy is prepared. The updated copy can then replace the original without causing service interruption, as the original serves as a backup and can be restored if needed.

Inventive Principle:

Principle #26Copying

2Reliability

If the number of virtual machines is increased to maintain continuous operation during updates, then uninterrupted service is provided, but resource efficiency decreases

Engineering Contradiction:

Improveuninterrupted malware detection serviceVSAvoidresource efficiency of Internet server

Core Design Contradiction:

ReliabilityVSLoss of energy

Solution Approach 1:

The system dynamically adjusts the number of virtual machines based on update requirements. During normal operation, a single virtual machine is used for optimal resource efficiency. During updates, the system temporarily scales to multiple instances and then automatically scales back, allowing the infrastructure to adapt its capacity to actual needs rather than maintaining permanent redundancy.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system changes the operational parameters of the virtual machine infrastructure by modifying the scale-out and scale-in settings specifically for update events. This allows the system to temporarily increase capacity during updates and then return to its optimized single-instance state, preventing permanent resource overhead while ensuring update capability.

Inventive Principle:

Principle #35Parameter changes

3Adaptability or versatility

If scale-out and scale-in events are triggered during updates, then virtual machine images are updated, but complex management of scaling groups is required

Engineering Contradiction:

Improveability to update virtual machine imagesVSAvoidmanagement complexity of scaling groups

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system introduces an update group as an intermediary layer between the scaling group and the update process. This update group manages the snapshot creation and image updates, while the scaling group continues to manage virtual machine lifecycle. This intermediary abstraction simplifies the overall system by separating concerns and allowing each component to focus on its specific function.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12430421B2Apparatus and method for updating internet-based malware detection engine using scaling control of virtual machine

Publication Date: 2025.09.30 ELECTRONICS & TELECOMM RES INST

AI summary

Disclosed herein are an apparatus and method for updating an Internet-based malware detection engine using virtual machine scaling. The method may include creating a scaling group and an update group set based on a first virtual machine image, creating a second virtual machine image for a running virtual machine in response to occurrence of a snapshot event in the virtual update group run based on the first virtual machine image, modifying the scale-out image of the scaling group to the second virtual machine image, updating the scaling group by triggering a scale-out event and a scale-in event in the scaling group in response to occurrence of an update event, and modifying the scale-in image of the scaling group to the second virtual machine image.