Software Inventory Derivation Using Pre-computed Hash Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems face challenges in efficiently processing large amounts of data due to demanding processes, such as virus scans and software inventory, which can render computers unusable despite advances in hardware.
Innovation Solution
The use of collision-resistant hash functions, like SHA1, to generate unique signatures for files, allowing for efficient tracking and identification of files across a network, including software inventory and malware detection, by comparing these signatures against catalogs and secondary indices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional file scanning and processing methods are used for software inventory and virus detection, then comprehensive security checking is achieved, but system performance degrades and computers become unusable
Solution Approach 1:
The system pre-computes and stores hash values of all files in the database during database creation, rather than computing them during security scans. This preliminary action allows rapid comparison during inventory and virus detection operations, maintaining comprehensive security checking while preserving system performance.
Solution Approach 2:
Instead of scanning and analyzing actual file contents during security operations, the system uses copied representations in the form of hash values. These hash copies enable comprehensive file identification and virus detection without the computational overhead of processing actual file data, thus maintaining security reliability while improving productivity.
2Measurement precision
If comprehensive file analysis is performed for software inventory derivation, then accurate software tracking is achieved, but processing time increases significantly
Solution Approach 1:
The system extracts only the essential identifying characteristic (hash value) from files for inventory tracking purposes, rather than performing comprehensive file analysis. This extraction approach maintains accurate software identification while dramatically reducing processing time by avoiding unnecessary detailed file examinations.
Solution Approach 2:
The system pre-computes hash values and stores them in the database during database creation, performing the identification work in advance. This preliminary action enables rapid software inventory derivation with high accuracy without incurring significant processing time during actual inventory operations.
3Reliability
If large amounts of file data are processed for security scanning and inventory, then thorough security checking is achieved, but hardware resources are overwhelmed
Solution Approach 1:
The system uses hash value copies instead of actual file data during security scanning and inventory operations. This copying approach maintains thorough security checking capability by enabling complete file identification and virus detection while dramatically reducing hardware resource consumption by processing only small hash values rather than large file contents.
Data Source
AI summary
A method, article of manufacture, and apparatus for efficiently processing information are disclosed. In some embodiments, this may include creating a first signature index, deriving a second signature index, wherein the second signature index is created by a backup application, comparing the first signature index to a second signature index, determining a positive signature match based on the comparison, and identifying a software application based on the positive signature match.