Virus Scanning Priority Order Based on Startup Execution Timing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virus scanning software lacks a systematic approach to directory scanning order, leading to unpredictable detection and removal of viruses that execute shortly after system startup, as the scan order is arbitrary and may not cover critical directories in time.
Innovation Solution
A method to determine a priority order for scanning the file system based on information about entities that could cause virus execution, such as startup programs and installed applications, to prioritize high-risk areas of the file system during a virus scan.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virus scanning software uses arbitrary scan order (e.g., alphabetic order), then the scanning process is simple to implement, but the detection reliability of viruses executing shortly after system startup deteriorates
Solution Approach 1:
The system performs preliminary actions by pre-determining the scan order based on entity relationships and execution timing information before the actual virus scanning begins. This allows critical directories to be scanned first without adding complexity during the scanning process itself.
Solution Approach 2:
Different parts of the file system are scanned with different priorities based on their local characteristics. Critical directories containing entities that execute shortly after system startup are prioritized, while other directories can be scanned later, creating a non-uniform but optimized scan order.
2Reliability
If the virus scan covers the entire file system, then the completeness of virus detection is improved, but the scanning time increases
Solution Approach 1:
The file system is segmented into multiple directories and entities based on their relationships and execution timing. The scan is then divided into phases, scanning critical segments first (those containing entities executing shortly after startup) and less critical segments later, maintaining completeness while reducing time.
Solution Approach 2:
The system identifies and prepares the scan order for critical file system entities before executing the full scan. By pre-determining which directories and files need immediate attention based on their execution timing characteristics, the system can efficiently allocate scanning resources.
Data Source
AI summary
The present invention provides a method, data processing system and program product in which scanning for a virus is improved by prioritizing the scan of executable files, such as applications, libraries, services etc., which are more likely to cause a problem to a computer system, ahead of other files. A priority order is determined free from user input by obtaining information from the operating system which can be used to determine such an order. For example the information comprises details of startup applications and/or launch frequency of installed applications. This enables the virus scanner to prioritize the scan of higher risk files which, if they contained a virus, would otherwise adversely affect a computer system if a prior art virus scan was performed based on an arbitrary search order.