Virtual Machine Antivirus Isolation for Resource Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current antivirus measures, including antivirus software and virtual machines, face challenges in completely preventing virus infections due to resource consumption and system instability, especially with large definition files and frequent updates, which hinder responsive computer operations.
Innovation Solution
A system is implemented with at least one virtual machine for application execution and a second virtual machine dedicated to antivirus software, where the antivirus virtual machine monitors and removes viruses from the first virtual machine, eliminating the need for antivirus software on other virtual machines and reducing resource consumption and system load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If antivirus software is introduced into each virtual machine, then virus detection capability is improved, but resource consumption increases and system load becomes heavier
Solution Approach 1:
The patent merges the antivirus function across multiple virtual machines by introducing a shared antivirus appliance that centrally manages virus detection for all VMs. This consolidates what would otherwise be duplicate antivirus software instances in each VM, reducing overall resource consumption while maintaining comprehensive virus detection capability through centralized processing and shared definition files.
Solution Approach 2:
The antivirus appliance is designed as a universal system that serves multiple virtual machines simultaneously. It performs multiple functions including virus detection, definition file management, and coordinated response across different VMs, replacing the need for separate antivirus software in each individual VM while maintaining comprehensive protection.
2Reliability
If antivirus software is introduced into each virtual machine, then virus detection capability is improved, but hardware load increases
Solution Approach 1:
The patent merges the antivirus function across multiple virtual machines by introducing a shared antivirus appliance that centrally manages virus detection for all VMs. This consolidates what would otherwise be duplicate antivirus software instances in each VM, reducing overall resource consumption while maintaining comprehensive virus detection capability through centralized processing and shared definition files.
Solution Approach 2:
The antivirus appliance acts as an intermediary between the virtual machines and the virus detection function. Instead of each VM running its own antivirus software, the appliance serves as a centralized mediator that handles virus detection for all VMs, reducing the computational burden on individual hardware components while maintaining comprehensive protection.
3Reliability
If definition file is frequently updated, then virus protection against new types is improved, but system responsiveness deteriorates
Solution Approach 1:
The patent implements preliminary action by pre-loading virus definition files into the antivirus appliance before they are needed. The system maintains a cache of definition files and can proactively update them during low-activity periods, ensuring that when virus detection is needed, the latest definitions are already available without causing interruptions or delays to system operations.
Solution Approach 2:
The system employs periodic action by scheduling definition file updates during specific time windows when system activity is minimal. This allows the antivirus appliance to periodically refresh its virus definitions without continuously impacting system responsiveness, balancing the need for up-to-date protection with maintaining optimal performance during active operations.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
In one computer system, causing the second virtual machine, which executes antivirus software for detecting and removing the virus, to monitor at least one first virtual machine that is created on the computer and execute one or more application program, periodically storing a state of the first virtual machine as snapshot, suspending the first virtual machine from which the virus is detected if the antivirus software executed on the second virtual machine detects the virus, and restoring the first virtual machine at a state of a point in time when the snapshot is stored by using the snapshot of the suspended first virtual machine.