IP Library Granted Patent US 9,654,497
Granted Patent B2
US 9,654,497 · App. 14/678,956 · Granted May 16, 2017

Virus-release-date-based priority virus scanning

Inventors: Juan A. Coronado (Tucson, AZ); Sara M. Coronado (Tucson, AZ); Christina A. Lara (Tucson, AZ); Lisa R. Martinez (Escondido, CA)
Assignee: International Business Machines Corporation
H04L63/145G06F17/30345H04L63/1433H04L67/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,654,497
App. No.
14/678,956
Granted
May 16, 2017
Kind
B2
Abstract

A method for more efficiently scanning files for viruses includes determining a vulnerability date associated with a virus, wherein the vulnerability date is related to a release date of the virus. In certain embodiments, the vulnerability date is a user-tunable amount of time before or after the release date. The method further determines, on a storage system, which files that have been updated since the vulnerability date. These files are scanned for the virus in a first batch. The method further determines which files have not been updated since the vulnerability date. These files are scanned for the virus in a second batch. Because files in the first batch have been updated since the vulnerability date, scanning the first batch may be given priority over scanning the second batch. A corresponding system and computer program product are also disclosed.

Claims (37)

1. A method for more efficiently scanning files for viruses, the method comprising:

determining a release date associated with a virus;

determining a vulnerability date that is a specified amount of time before or after the release date;

enabling a user to adjust the amount of time by modifying a user-tunable relationship value that designates a relationship between the vulnerability date and the release date;

dividing, by at least one processor, files stored on a storage system into a first set of files and a second set of files, wherein the first set comprises files that have been updated since the vulnerability date, and the second set comprises files that have not been updated since the vulnerability date;

immediately scanning, by the at least one processor, the first set of files for the virus;

delaying, by the at least one processor, scanning of the second set of files for the virus until an off-peak period of I/O to the storage system; and

scanning, by the at least one processor, the second set of files for the virus during the off-peak period.

2. The method of claim 1 , further comprising determining the release date from an antivirus software product.

3. The method of claim 1 , wherein dividing the files comprises examining metadata storing update dates for the first and second sets of files.

4. The method of claim 1 , wherein the first and second sets of files comprise at least one of complete files, subfiles, and combinations of complete files and subfiles.

5. The method of claim 3 , further comprising, after scanning the first and second sets of files, updating the metadata to include at least one of a virus identifier associated with the virus, the release date associated with the virus, and a date the first and second sets of files were scanned for the virus.

6. A computer program product to more efficiently scan files for viruses, the computer program product comprising a non-transitory computer-readable storage medium having computer-usable program code embodied therein, the computer-usable program code comprising:

computer-usable program code to determine a release date associated with a virus;

computer-usable program code to determine a vulnerability date that is a specified amount of time before or after the release date;

computer-usable program code to enable a user to adjust the amount of time by modifying a user-tunable relationship value that designates a relationship between the vulnerability date and the release date;

computer-usable program code to divide files stored on a storage system into a first set of files and a second set of files, wherein the first set comprises files that have been updated since the vulnerability date, and the second set comprises files that have not been updated since the vulnerability date;

computer-usable program code to immediately scan the first set of files for the virus;

computer-usable program code to delay scanning of the second set of files for the virus until an off-peak period of I/O to the storage system; and

computer-usable program code to scan the second set of files for the virus during the off-peak period.

7. The computer program product of claim 6 , further comprising computer-usable program code to determine the release date from an antivirus software product.

8. The computer program product of claim 6 , wherein dividing the files comprises examining metadata storing update dates for the first and second sets of files.

9. The computer program product of claim 6 , wherein the first and second sets of files comprise at least one of complete files, subfiles, and combinations of complete files and subfiles.

10. The computer program product of claim 8 , further comprising computer-usable program code to, after scanning the first and second sets of files, update the metadata to include at least one of a virus identifier associated with the virus, the release date associated with the virus, and a date the first and second sets of files were scanned for the virus.

11. A system to more efficiently scan files for viruses, the system comprising:

at least one processor;

at least one memory device operably coupled to the at least one processor and storing instructions for execution on the at least one processor, the instructions causing the at least one processor to:

determine a release date associated with a virus;

determine a vulnerability date that is a specified amount of time before or after the release date;

enable a user to adjust the amount of time by modifying a user-tunable relationship value that designates a relationship between the vulnerability date and the release date;

divide files stored on a storage system into a first set of files and a second set of files, wherein the first set comprises files that have been updated since the vulnerability date, and the second set comprises files that have not been updated since the vulnerability date;

immediately scan the first set of files for the virus;

delay scanning of the second set of files for the virus until an off-peak period of I/O to the storage system; and

scan the second set of files for the virus during the off-peak period.

12. The system of claim 11 , wherein the instructions further cause the at least one processor to determine the release date from an antivirus software product.

13. The system of claim 11 , wherein dividing the files comprises examining metadata storing update dates for the first and second sets of files.

14. The system of claim 13 , wherein the instructions further cause the at least one processor to, after scanning the first and second sets of files, update the metadata to include at least one of a virus identifier associated with the virus, the release date associated with the virus, and a date the first and second sets of files were scanned for the virus.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 15, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: AIRBNB, INC.
Reel/Frame 056427/0193 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 4, 2015
From: CORONADO, JUAN A.; CORONADO, SARA M.; LARA, CHRISTINA A.; MARTINEZ, LISA R.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 035334/0730 →
Continuity (1)
Related Publication 20160294847A1 · Oct 6, 2016