FINGERPRINT ANALYSIS FOR ANTI-VIRUS SCAN
First Claim
1. A method of operating a data identification system, the method comprising:
- identifying a first plurality of changed blocks in a first primary storage volume;
processing the first plurality of changed blocks to generate a first plurality of fingerprints;
scanning a first plurality of data items stored in a first secondary storage volume within the first primary storage volume corresponding to the first plurality of changed blocks to identify a first infected data item of the first plurality of data items;
identifying a first reference fingerprint from the first plurality of fingerprints corresponding to the first infected data item;
identifying a second plurality of changed blocks in a second primary storage volume corresponding to a second plurality of data items stored in a second secondary storage volume within the second primary storage volume;
processing the second plurality of changed blocks to generate a second plurality of fingerprints; and
identifying a first target fingerprint from the second plurality of fingerprints that corresponds to the first reference fingerprint.
10 Assignments
0 Petitions
Accused Products
Abstract
Disclosed is a method of operating a data identification system. The method comprises identifying a first plurality of changed blocks in a first primary storage volume, processing the first plurality of changed blocks to generate a first plurality of fingerprints, scanning a first plurality of data items stored in a first secondary storage volume within the first primary storage volume corresponding to the first plurality of changed blocks to identify a first infected data item of the first plurality of data items, identifying a first reference fingerprint from the first plurality of fingerprints corresponding to the first infected data item, identifying a second plurality of changed blocks in a second primary storage volume corresponding to a second plurality of data items stored in a second secondary storage volume within the second primary storage volume, processing the second plurality of changed blocks to generate a second plurality of fingerprints, and identifying a first target fingerprint from the second plurality of fingerprints that corresponds to the first reference fingerprint.
24 Citations
17 Claims
-
1. A method of operating a data identification system, the method comprising:
-
identifying a first plurality of changed blocks in a first primary storage volume; processing the first plurality of changed blocks to generate a first plurality of fingerprints; scanning a first plurality of data items stored in a first secondary storage volume within the first primary storage volume corresponding to the first plurality of changed blocks to identify a first infected data item of the first plurality of data items; identifying a first reference fingerprint from the first plurality of fingerprints corresponding to the first infected data item; identifying a second plurality of changed blocks in a second primary storage volume corresponding to a second plurality of data items stored in a second secondary storage volume within the second primary storage volume; processing the second plurality of changed blocks to generate a second plurality of fingerprints; and identifying a first target fingerprint from the second plurality of fingerprints that corresponds to the first reference fingerprint. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A data identification system, the system comprising:
-
an interface configured to receive a scan request a scan request; and a processor in communication with the interface and configured to receive the scan request, identify a first plurality of changed blocks in a first primary storage volume, process the first plurality of changed blocks to generate a first plurality of fingerprints, scan a first plurality of data items stored in a first secondary storage volume within the first primary storage volume corresponding to the first plurality of changed blocks to identify a first infected data item of the first plurality of data items, identify a first reference fingerprint from the first plurality of fingerprints corresponding to the first infected data item, identify a second plurality of changed blocks in a second primary storage volume corresponding to a second plurality of data items stored in a second secondary storage volume within the second primary storage volume, process the second plurality of changed blocks to generate a second plurality of fingerprints, and identify a first target fingerprint from the second plurality of fingerprints that corresponds to the first reference fingerprint. - View Dependent Claims (10, 11, 12, 13, 14, 15, 16)
-
-
17. A computer readable medium having program instructions stored thereon for operating a data identification system that, when executed by a data identification system, direct the data identification system to:
-
identify a first plurality of changed blocks in a first primary storage volume; process the first plurality of changed blocks to generate a first plurality of fingerprints; scan a first plurality of data items stored in a first secondary storage volume within the first primary storage volume corresponding to the first plurality of changed blocks to identify a first infected data item of the first plurality of data items; identify a first reference fingerprint from the first plurality of fingerprints corresponding to the first infected data item; identify a second plurality of changed blocks in a second primary storage volume corresponding to a second plurality of data items stored in a second secondary storage volume within the second primary storage volume; process the second plurality of changed blocks to generate a second plurality of fingerprints; and identify a first target fingerprint from the second plurality of fingerprints that corresponds to the first reference fingerprint.
-
Specification