IP Library Granted Patent US 11,606,392
Granted Patent B2
US 11,606,392 · App. 16/887,956 · Granted Mar 14, 2023

System for tuning a device having security software for security and performance

Inventors: Shuborno Biswas (Waterloo, CA); Junmin Qiu (Waterloo, CA); Siddaraya B. Revashetti (Cupertino, CA)
Assignee: McAfee, LLC
H04L63/20G06F9/45558G06F21/53G06F21/6218H04L41/0893
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,606,392
App. No.
16/887,956
Granted
Mar 14, 2023
Kind
B2
Abstract

An apparatus, related devices and methods, having a memory element operable to store instructions; and a processor operable to execute the instructions, such that the apparatus is configured to determine, based on operating system workload demands, whether a high-demand application is running and, based on a determination that a high-demand application is running, apply an optimization policy that modifies a security application, wherein the optimization policy modification includes reducing a protection applied by the security application.

Claims (53)

1. An apparatus, comprising:

a memory element operable to store instructions; and

a processor operable to execute the instructions, such that the apparatus is configured to

determine whether a high-demand application is running based on detecting that operating system workload demands are high;

apply, based on a determination that a high-demand application is running, an optimization policy that modifies a security application, wherein the optimization policy modification includes reducing a protection applied by the security application, and the optimization policy is a first optimization policy; and

apply a second optimization policy that modifies a hardware configuration.

2. The apparatus of claim 1 , wherein the apparatus is further configured to:

determine, based on operating system workload demands, that the high-demand application is not running; and

apply, based on a determination that the high-demand application is not running, a security policy that modifies the security application, and the security policy modification includes restoring the protection applied by the security application that was reduced by the first optimization policy.

3. The apparatus of claim 1 , further configured to:

monitor the optimization policy modification;

collect performance data associated with the optimization policy modification; and

send, to a cloud server, the performance data for analysis to determine whether the operating system achieved a threshold performance while the optimization policy was applied.

4. The apparatus of claim 1 , wherein reducing a protection applied by the security application includes disabling one or more real-time security scanners, preventing new virus definition sets from downloading, or disabling security application updates.

5. The apparatus of claim 1 , wherein the hardware modification includes overclocking a processor speed or allocating, to the high-demand application, priority access to network bandwidth.

6. The apparatus of claim 1 , further configured to:

monitor the impact of the hardware modification, wherein monitoring the impact includes monitoring a temperature of the processor or monitoring a utilization of network bandwidth.

7. The apparatus of claim 6 , further configured to:

determine whether the impact of the hardware modification requires the second optimization policy to be changed; and

apply, based on a determination that the impact of the hardware modification requires that the second optimization policy be changed, a third optimization policy, where the third optimization policy restores the hardware configuration that was modified by the second optimization policy.

8. At least one non-transitory, computer-readable medium including one or more instructions that, when executed by a processor, cause the processor to perform a method comprising:

identifying operating system workload demands;

determining whether operating system workload demands are high;

applying, based on a determination that operating system workload demands are high based on a high-demand application, an optimization policy that modifies a security application, wherein the optimization policy modification includes removing a protection applied by the security application, and the optimization policy is a first optimization policy; and

applying a second optimization policy that modifies a hardware configuration.

9. The at least one non-transitory, computer-readable medium of claim 8 , the method further comprising:

identifying a change in operating system workload demands; and

applying, based on a determination that operating system workload demands are low, a security policy that modifies the security application, wherein the security policy modification includes restoring the protection applied by the security application that was removed by the first optimization policy.

10. The at least one non-transitory, computer-readable medium of claim 8 , the method further comprising:

monitoring the optimization policy modification;

collecting performance data associated with the optimization policy modification; and

sending, to a cloud server, the performance data for analysis to determine whether the operating system achieved a threshold performance while the optimization policy was applied.

11. The at least one non-transitory, computer-readable medium of claim 8 , wherein removing a protection applied by the security application includes disabling one or more real-time security scanners, preventing new virus definition sets from downloading, or disabling security application updates.

12. The at least one non-transitory computer-readable medium of claim 8 , the method further comprising:

monitoring the impact of the hardware modification.

13. The at least one non-transitory computer-readable medium of claim 12 , the method further comprising:

determining whether the impact of the hardware modification requires the second optimization policy to be changed; and

applying, based on a determination that the impact of the hardware modification requires that the second optimization policy be changed, a third optimization policy, where the third optimization policy restores the hardware configuration that was modified by the second optimization policy.

14. The at least one non-transitory, computer-readable medium of claim 8 , wherein the hardware modification includes overclocking a processor speed or reprioritizing access to network bandwidth.

15. A method, comprising:

receiving, from an electronic device, a software configuration and a hardware configuration of the electronic device, wherein the software configuration includes a security application and a high-demand application;

developing an optimization policy to improve performance of the high-demand application, wherein the optimization policy modifies a configuration of the security application;

sending the optimization policy to the electronic device for implementation;

receiving, from the electronic device, performance data collected during implementation of the optimization policy;

determining whether the optimization policy improved performance of the high-demand application; and

developing, based on a determination that the optimization policy did not improve performance of the high-demand application, an updated optimization policy, wherein the updated optimization policy is developed based on the performance data.

16. The method of claim 15 , wherein determining whether the optimization policy improved performance of the high-demand application includes comparing the performance data to predefined performance metrics.

17. The method of claim 15 , wherein the electronic device is a first electronic device, the high-demand application is a first high-demand application, the method further comprising:

receiving, from a second electronic device, a software configuration and a hardware configuration of the second electronic device, wherein the software configuration includes the security application and a second high-demand application;

sending the optimization policy to the second electronic device for implementation; and

receiving, from the second electronic device, performance data collected during implementation of the optimization policy; and

the updated optimization policy is developed based on the performance data from the first and second electronic devices.

18. The method of claim 15 , wherein the optimization policy further modifies a hardware configuration of the electronic device.

Assignments (3)
CORRECTIVE ASSIGNMENT TO CORRECT THE THE PATENT TITLES AND REMOVE DUPLICATES IN THE SCHEDULE PREVIOUSLY RECORDED AT REEL: 059354 FRAME: 0335. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Jun 23, 2022
From: MCAFEE, LLC
To: JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 060792/0307 →
SECURITY INTEREST Recorded Mar 3, 2022
From: MCAFEE, LLC
To: JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT AND COLLATERAL AGENT
Reel/Frame 059354/0335 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 29, 2020
From: BISWAS, SHUBORNO; QIU, JUNMIN; REVASHETTI, SIDDARAYA
To: MCAFEE, LLC
Reel/Frame 052791/0738 →
Continuity (1)
Related Publication 20210377312A1 · Dec 2, 2021
Cited By (1)
US 12,706,932