User-Defined Content Validation for Malware Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Storage systems lack the ability to perform content-aware validations, such as detecting malware and malicious damages, due to their unawareness of the stored content beyond file encapsulation.
Innovation Solution
Implementing a user-defined validation program that allows accessing entities to execute validation rules on stored content, with triggers and protective actions, and scheduling the validation process using compute resources within or outside the storage system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the storage system uses standard data and metadata access commands, then the ease of operation is improved, but the ability to perform content-aware validations deteriorates
Solution Approach 1:
The patent introduces an intermediary validation mechanism that sits between the standard access commands and the stored content. This intermediary layer enables content-aware validations by intercepting access operations, executing validation rules on the content, and then proceeding with the standard access if validation succeeds. This resolves the contradiction by adding validation capability without replacing the existing ease-of-use access commands.
2Reliability
If the storage system implements content-aware validation, then the reliability is improved, but the device complexity increases
Solution Approach 1:
The patent segments the validation functionality into separate, modular validation rules that can be independently defined, executed, and managed. Each validation rule operates as an independent unit that can be applied to specific content types or access scenarios. This segmentation reduces overall system complexity by allowing validation logic to be broken down into manageable, reusable components rather than requiring a monolithic validation system.
3Object-affected harmful factors
If the storage system executes validation programs on stored content, then the security against malware is improved, but the productivity deteriorates due to additional processing time
Solution Approach 1:
The patent implements partial validation by applying validation rules selectively rather than to all content access operations. Validation is triggered based on specific conditions such as content type, user permissions, or risk levels. For low-risk or trusted content, validation may be skipped or performed with reduced checks. This partial action approach maintains security for critical content while preserving productivity for routine operations.
Data Source
AI summary
A method for user-defined validation of content stored in a storage system, the method may include receiving a request to execute a user-defined validation process (UDVP) on the content that is stored in the storage system; wherein the request is associated with means for executing the UDVP, and a content identifier; scheduling, by the storage system, at least one execution of the UDVP; executing the UDVP according to the scheduling to provide one or more validation results; and finding that the one or more validation results are indicative of potential security issues and performing one or more validation-triggered security measures.


