Anti Virus Scanner with Pipelined Virus Database
D. Jennifer, K. Nivethitha, K. Sangeetha, K. Kiruthika · SSRN Electronic Journal · 2016
The main aim of this work is to build a virus scanner that consumes minimal main memory space for the storage of the virus database while scanner is in operation. All commercial antivirus products have three major components :(1) scan engine, (2) VDBs, (3) updater. VDB contains virus signatures for all the viruses. Building a VDB to cope with almost one million viral patterns is not a painless task and while the scanner is in progress, massive memory is needed. To overcome this, we are introducing a proposal to build a virus scanner that consumes minimal main memory space. In this work, the viral patterns will be grouped into different sets according to their nature and allowed to enter into main memory whenever needed, i.e. instead of loading all patterns, only a few patterns are loaded at a time, and the scan engine scans the file searching for a particular set of patterns. Once the scan is completed for the listed patterns, then another set of patterns will be loaded and the scan is repeated, which leads to significant reduction in the memory usage. To accomplish this, virus scan engine should be customized to be adaptable with the modified VDB structure.