User-Defined Content Validation for Malware Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Storage systems lack the ability to perform content-aware validations, such as detecting malware and malicious damages, due to their unawareness of the stored content beyond file encapsulation.

Innovation Solution

Implementing a user-defined validation program that allows accessing entities to execute validation rules on stored content, with triggers and protective actions, and scheduling the validation process using compute resources within or outside the storage system.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the storage system uses standard data and metadata access commands, then the ease of operation is improved, but the ability to perform content-aware validations deteriorates

Engineering Contradiction:
Improveease of operationVSAvoidcontent-aware validation capability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces an intermediary validation mechanism that sits between the standard access commands and the stored content. This intermediary layer enables content-aware validations by intercepting access operations, executing validation rules on the content, and then proceeding with the standard access if validation succeeds. This resolves the contradiction by adding validation capability without replacing the existing ease-of-use access commands.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the storage system implements content-aware validation, then the reliability is improved, but the device complexity increases

Engineering Contradiction:
Improvecontent-aware validation capabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the validation functionality into separate, modular validation rules that can be independently defined, executed, and managed. Each validation rule operates as an independent unit that can be applied to specific content types or access scenarios. This segmentation reduces overall system complexity by allowing validation logic to be broken down into manageable, reusable components rather than requiring a monolithic validation system.

Inventive Principle:
Principle #1Segmentation

3Object-affected harmful factors

If the storage system executes validation programs on stored content, then the security against malware is improved, but the productivity deteriorates due to additional processing time

Engineering Contradiction:
Improvesecurity against malwareVSAvoiddata access speed
Core Design Contradiction:
Object-affected harmful factorsVSProductivity

Solution Approach 1:

The patent implements partial validation by applying validation rules selectively rather than to all content access operations. Validation is triggered based on specific conditions such as content type, user permissions, or risk levels. For low-risk or trusted content, validation may be skipped or performed with reduced checks. This partial action approach maintains security for critical content while preserving productivity for routine operations.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS12411941B2User defined validation on content stored in a storage system
Publication Date: 2025.09.09 VAST DATA LTD
  • US12411941B2 patent drawing
  • US12411941B2 patent drawing
  • US12411941B2 patent drawing

AI summary

A method for user-defined validation of content stored in a storage system, the method may include receiving a request to execute a user-defined validation process (UDVP) on the content that is stored in the storage system; wherein the request is associated with means for executing the UDVP, and a content identifier; scheduling, by the storage system, at least one execution of the UDVP; executing the UDVP according to the scheduling to provide one or more validation results; and finding that the one or more validation results are indicative of potential security issues and performing one or more validation-triggered security measures.