Kaspersky Lab has patented a new technology that is designed to prioritize data scanning processes on virtual machines. This new technology greatly accelerates the processing of high priority scanning requests in real time while maintaining the performance of virtual machines.
The patent was granted by the U.S. Patent and Trademark Office.
A corporate virtual environment typically consists of a dedicated virtual machine, which is protected by a security solution and a network of virtual workstations with so-called agents. A network connection is installed between the dedicated virtual machine and the agents to enable data exchange during an on-demand scan of virus files (ODS) or an on-access application scan for viruses (OAS).
This approach greatly reduces the use of resources in specific virtual machines, while maintaining a high level of information security across the virtual infrastructure. However, there is a risk that on-demand file scans may be consuming a large amount of server resources, which in turn significantly impedes on-access application scans.
This can significantly reduce the execution speed of applications for which security confirmation needs to be done in real time.
Patented technology can put the on-access scans into higher priority, which positively affects the performance of virtual servers or virtual workstations, reducing the response time of the antivirus engine.
Technology binds one or more network connections between the agent and the dedicated virtual machine. When "reserved" connections are not busy, they can be used for both on-demand and on-access scans. When an on-access scan is required, the "tied" connection overtakes on-demand and proceeds to on-access scans, which are considered higher priority. This significantly increases the processing speed of priority requests.
"When we developed this solution to protect virtual infrastructure environments such as Microsoft Hyper-V, Citrix XenServer and VMware vSphere, we focused on two key conditions: minimal performance impact and maximum security. Patented technology makes it possible to quickly process loads to protect virtual servers and workstations because of the optimal distribution of scheduled tasks, taking account of all the load on the virtual infrastructure,
commented Alexander Onishchenko, Product Manager of Kaspersky Lab.
Patented technology is built into Kaspersky Security for Virtualization - Light Agent. More information about the solution is available here.