Storage Subsystem Anti-Virus Scanning Module
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virus scanning methods consume a large proportion of system resources, particularly in central processing units, and are ineffective in protecting against file infecting viruses in writable memory subsystems like hard drives.
Innovation Solution
A system and method that offloads virus and content scanning to a storage subsystem, using a scanning module integrated with or coupled to the storage driver, which intercepts read and write requests from the central processing unit to scan data before allowing access or writing, thereby reducing CPU load and preventing malicious code propagation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virus scanning is performed using read-only media, then protection against virus infection is improved, but adaptability to writable memory subsystems deteriorates
Solution Approach 1:
The scanning function is extracted from the CPU and relocated to the storage subsystem. The storage subsystem now performs virus scanning independently, separating the scanning function from the traditional CPU-based approach and enabling it to operate effectively with writable media without compromising system adaptability.
Solution Approach 2:
The storage subsystem acts as an intermediary between the CPU and the storage media. It intercepts read/write requests, performs scanning operations, and then allows or blocks access based on scanning results. This intermediary role enables the system to provide virus protection in writable memory subsystems while maintaining full adaptability.
2Reliability
If virus scanning is performed by the central processing unit, then scanning capability is improved, but system resource consumption deteriorates
Solution Approach 1:
The virus scanning function is extracted from the CPU and relocated to the storage subsystem. This extraction significantly reduces CPU resource consumption while maintaining scanning capability, as the storage subsystem performs scanning operations independently without burdening the central processing unit.
Solution Approach 2:
The storage subsystem performs self-service by conducting virus scanning operations independently. It intercepts data access requests, scans for viruses, and makes decisions about data access without requiring continuous CPU intervention. This self-service capability reduces system resource consumption while maintaining effective scanning.
Data Source
AI summary
A system, method and computer program product are provided for scanning data. Initially, a request is received from a central processing unit for reading data saved in storage. The requested data is then scanned. If malicious code is not found in the data during the scanning, the data is transmitted from the storage to the central processing unit. In a similar manner, a request is received for data to be written in storage. In response to the request, the requested data is scanned. If malicious code is not found in the data during the scanning, data is written to the storage.