 Type-based selection of rules for semantically disambiguating words |
| The invention addresses problems that arise with the previous techniques of Segond et al. and Dini ... |
|
| Supplemental diagnostic and services resource planning for mobile systems |
| OF THE INVENTION The system and method integrate several well-known technologies via an ... |
|
| System for generating prescribed duration audio and/or video sequences |
| The present invention is directed toward a system for compiling a sequence of data blocks for ... |
|
| Object-oriented data processing system with transactional adapter |
| Thus, the prior art has not, on the one hand, provided general concurrency control of operations in ... |
|
| Control of commercial processes |
| The discussion below presents an arrangement that integrates a number of business process tools to ... |
|
| Method and apparatus for implementing a web page diary |
| The present invention allows a user to create a "diary" containing multimedia references to W... |
|
| On-line educational system for display of educational materials |
| A first apparatus for providing a course-level message center for use with an on-line educational ... |
|
|
Fast virus scanning using session stamping
| Details |
Inventors: Flint, Barney; Hughes, Michael;
Assignee: Network Associates Technology, Inc. (Santa Clara, CA)
Primary Examiner: Peeso; Thomas R.
Assistant Examiner:
Attorney, Agent or Firm: Blakely, Sokoloff, Taylor & Zafman LLP, Hamaty, Esq.; Christopher J.
A unique session key is created for each execution of anti-virus software and is used to create a session stamp for each file scanned during that execution. The session stamp is stored in the directory entry for the file. When a request for the file is made, the anti-virus software uses the current session key to validate the session stamp. An invalid or absent session stamp indicates that the file needs to be scanned. |
|
DETAILED DESCRIPTION The above-mentioned shortcomings, disadvantages and problems are addressed by the present invention, which will be understood by reading and studying the following specification.
Anti-virus software creates a session key for each execution of the software.
It obtains a session stamp that is associated with a directory entry for a file that is to be scanned.
If the session stamp was created using a session key for a previous session, or if there is no session stamp, the file is scanned for viruses.
An existing session stamp is updated as a result of the scan.
In one aspect, the existing session stamp is updated by being invalidated if the file is infected.
In another aspect, the existing session stamp is updated by identifying the file as infected.
The current session key is used when updating a session stamp or when a new session stamp is created.
In one aspect, the session stamp contains a signature that is alternately a session key or known value encrypted with a session key.
Because the session stamp is associated with the file's directory entry, the file system automatically reads the session stamp into memory, if the entry is not already cached, thus reducing the number of file accesses necessary to determine the AV state of the file.
Because directory entries are stored so they can be rapidly accessed, associating the session stamp with the entry also decreases the overall time a user must wait for the file to become available.
Additionally, when the file is renamed or moved without changes to the file itself, the session stamp remains with the directory entry so that the file does not have to be rescanned.
The present invention describes systems, clients, servers, methods, and computer-readable media of varying scope.
In addition to the aspects and advantages of the present invention described in this summary, further aspects and advantages of the invention will become apparent by reference to the drawings and by reading the detailed description that follows.
|
| Related patents |
|
|
Method and apparatus for increasing virus detection speed using a database
The foregoing and other problems are overcome and the objects of the invention are realized by methods and apparatus in accordance with embodiments of this invention. T...
|
|
|
Displaying multiple document abstracts in a single hyperlinked abstract, and their modified source documents
OF PREFERRED EMBODIMENTS Preferred embodiments of the present invention will be explained below with reference to the drawings. At first, terms used in the following ...
|
|
|
Optimization of simulation run-times based on fuzzy-controlled input values
The present inventions provides a method and apparatus for optimally adjusting simulation run-times based on the effects of outside forces that are impossible to ...
|
|
|
Forecasting contest
The present invention addresses the foregoing problems by providing a number of different inventive features which can be implemented individually or in any of a wide ...
|
|
|
Opening price process for trading system
What is claimed is: 1. A method of determining an opening price for a product traded in a trading system, the method executed over a distributed network computer system, ...
|
|
|
Method and apparatus for computer program usage monitoring
It is an object of the present invention to provide a software product to detect, monitor, report on, and control the software products installed on a computer system ...
|
|
|
Method and system for distributing software in a telecommunications network
The deficiencies of the prior art are overcome by the method and system of the present invention. For example, as heretofore unrecognized, it would be beneficial if ...
|
|
|
Method and system for downloading updates for software installation
In view of the foregoing, the present invention provides a method and system of downloading update data for installing a software product on a client computer that ...
|
|
|
Information retrieval apparatus and a method
It is an object of the present invention to provide an information retrieval apparatus and a method to present at least one retrieval result of high quality to the user ...
|
|
|
Dynamic caches with miss tables
The following Detailed Description will begin with a conceptual overview of the invention and will then describe a presently-preferred embodiment of the invention. O...
|
|
|
File Sharing 
