CN116502225B - Virus scanning method and device for self-adaptive packet redundancy arrangement and electronic equipment - Google Patents
Virus scanning method and device for self-adaptive packet redundancy arrangement and electronic equipment Download PDFInfo
- Publication number
- CN116502225B CN116502225B CN202310737029.7A CN202310737029A CN116502225B CN 116502225 B CN116502225 B CN 116502225B CN 202310737029 A CN202310737029 A CN 202310737029A CN 116502225 B CN116502225 B CN 116502225B
- Authority
- CN
- China
- Prior art keywords
- scanning
- virus scanning
- node
- virus
- target
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 241000700605 Viruses Species 0.000 title claims abstract description 476
- 238000000034 method Methods 0.000 title claims abstract description 51
- 238000003860 storage Methods 0.000 claims description 16
- 230000008569 process Effects 0.000 claims description 10
- 230000003044 adaptive effect Effects 0.000 claims description 6
- 238000009826 distribution Methods 0.000 claims description 3
- 238000007726 management method Methods 0.000 description 17
- 238000010586 diagram Methods 0.000 description 11
- 230000006870 function Effects 0.000 description 9
- 238000004590 computer program Methods 0.000 description 7
- 238000005516 engineering process Methods 0.000 description 4
- 230000002155 anti-virotic effect Effects 0.000 description 3
- 230000003287 optical effect Effects 0.000 description 3
- 230000010485 coping Effects 0.000 description 2
- 238000013500 data storage Methods 0.000 description 2
- 238000004519 manufacturing process Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 238000012986 modification Methods 0.000 description 2
- 230000001413 cellular effect Effects 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 239000007787 solid Substances 0.000 description 1
- 230000001960 triggered effect Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/48—Program initiating; Program switching, e.g. by interrupt
- G06F9/4806—Task transfer initiation or dispatching
- G06F9/4843—Task transfer initiation or dispatching by program, e.g. task dispatcher, supervisor, operating system
- G06F9/4881—Scheduling strategies for dispatcher, e.g. round robin, multi-level priority queues
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/46—Multiprogramming arrangements
- G06F9/50—Allocation of resources, e.g. of the central processing unit [CPU]
- G06F9/5005—Allocation of resources, e.g. of the central processing unit [CPU] to service a request
- G06F9/5027—Allocation of resources, e.g. of the central processing unit [CPU] to service a request the resource being a machine, e.g. CPUs, Servers, Terminals
- G06F9/505—Allocation of resources, e.g. of the central processing unit [CPU] to service a request the resource being a machine, e.g. CPUs, Servers, Terminals considering the load
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
- Y02D10/00—Energy efficient computing, e.g. low power processors, power management or thermal management
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- General Health & Medical Sciences (AREA)
- Virology (AREA)
- Health & Medical Sciences (AREA)
- Medicines Containing Antibodies Or Antigens For Use As Internal Diagnostic Agents (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
The embodiment of the application provides a virus scanning method and device for self-adaptive packet redundancy arrangement and electronic equipment. According to the embodiment of the application, the virus scanning nodes are grouped, corresponding scanning groups are allocated for the virus scanning tasks, and the scheduling of different virus scanning tasks is automatically realized according to the performance load of each virus scanning node in the scanning groups; further, in this embodiment, according to the performance load of each virus scanning node in the scanning packet, whether to extend the redundant virus scanning node outside the scanning packet to the scanning packet is determined, so as to realize the virus scanning of the self-adaptive packet redundancy arrangement, and adapt to the high-concurrency virus scanning task.
Description
Technical Field
The present application relates to data security technologies, and in particular, to a method and apparatus for scanning viruses with adaptive packet redundancy arrangement, and an electronic device.
Background
In a specific application, in order to ensure the security of a file to be issued, a plurality of virus scanning nodes are often required to perform virus scanning on the file to be issued, for example, a plurality of virus scanning software (such as kabasky, norton, 360 virus killing, etc.) is used to perform virus scanning on the file to be issued, so as to ensure the security of the file to be issued. Currently, this virus scanning method usually requires manual operation.
However, the existing virus scanning mode by means of manual operation has low virus scanning efficiency and is difficult to be widely applied to scenes with huge quantity of files to be released.
Disclosure of Invention
The embodiment of the application provides a virus scanning method and device for self-adaptive packet redundancy arrangement and electronic equipment, so as to realize automation of virus scanning.
The embodiment of the application provides a virus scanning method for self-adaptive packet redundancy arrangement, which comprises the following steps:
distributing corresponding target scanning groups for the current virus scanning task from the existing scanning groups;
checking whether the performance load of each virus scanning node in the target scanning group meets the corresponding set scanning condition according to the unprocessed task in the target task queue corresponding to the target scanning group; any type of virus scanning node comprises at least one virus scanning node;
if the performance loads of all virus scanning nodes in the target scanning group meet the corresponding set scanning conditions, scheduling and controlling all virus scanning nodes in the target scanning group to process the current virus scanning task;
if at least one type of reference virus scanning node exists in the target scanning group, the performance load of each virus scanning node in the type of reference virus scanning node does not meet the set scanning conditions corresponding to the type of reference virus scanning node, selecting one target virus scanning node for replacing the type of reference virus scanning node from other deployed virus scanning nodes except for the type of virus scanning node in the target scanning group for each type of reference virus scanning node, and executing the current virus scanning task by utilizing the target virus scanning node to replace the type of reference virus scanning node.
An adaptive packet redundancy orchestrated virus scanning apparatus, the apparatus comprising:
the distribution module is used for distributing corresponding target scanning groups for the current virus scanning task from the existing scanning groups;
the task management module is used for checking whether the performance load of each virus scanning node in the target scanning group meets the corresponding set scanning condition according to the unprocessed task in the target task queue corresponding to the target scanning group; any type of virus scanning node comprises at least one virus scanning node; the method comprises the steps of,
when at least one type of reference virus scanning nodes exist in a target scanning group, if the performance load of each virus scanning node in the type of reference virus scanning nodes does not meet the set scanning conditions corresponding to the type of reference virus scanning nodes, selecting one target virus scanning node for replacing the type of reference virus scanning nodes from other deployed virus scanning nodes except for the type of virus scanning nodes in the target scanning group;
the task scheduling module is used for checking that the performance loads of all virus scanning nodes in the target scanning group meet corresponding set scanning conditions in the task management module, and scheduling and controlling all virus scanning nodes in the target scanning group to process the current virus scanning task; the method comprises the steps of,
And when the task management module detects that at least one type of reference virus scanning node exists in the target scanning group, the target virus scanning node is scheduled to replace the type of reference virus scanning node to execute the current virus scanning task.
An electronic device, the electronic device comprising: a processor and a machine-readable storage medium;
the machine-readable storage medium has stored thereon computer instructions which, when executed by a processor, implement the steps in the above method.
According to the technical scheme, the virus scanning nodes are grouped, corresponding scanning groups are allocated for the virus scanning tasks from the existing scanning groups, and the dispatching of the virus scanning tasks is automatically realized according to the performance load of the virus scanning nodes in the scanning groups;
further, in this embodiment, when it is determined according to the performance loads of various virus scanning nodes in the scanning packet that the performance loads of at least one type of virus scanning nodes in the scanning packet do not meet the corresponding set scanning conditions, for each type of virus scanning node whose performance load does not meet the corresponding set scanning conditions, the redundant virus scanning nodes outside the scanning packet are extended to the scanning packet to replace the type of virus scanning node to perform a virus scanning task, so that virus scanning with adaptive packet redundancy arrangement is implemented, and high concurrent virus scanning tasks are adaptively handled.
Drawings
The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description, serve to explain the principles of the disclosure.
FIG. 1 is a flow chart of a method according to an embodiment of the present application;
FIG. 2 is a schematic block diagram of a scanning packet provided in an embodiment of the present application;
FIG. 3 is a flowchart illustrating implementation of step 104 according to an embodiment of the present application;
FIG. 4 is a schematic diagram of an embodiment of a method according to the present application;
FIG. 5 is a schematic diagram of a device according to an embodiment of the present application;
fig. 6 is a block diagram of a hardware device according to an embodiment of the present application.
Detailed Description
Reference will now be made in detail to exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numbers in different drawings refer to the same or similar elements, unless otherwise indicated. The implementations described in the following exemplary examples do not represent all implementations consistent with the application. Rather, they are merely examples of apparatus and methods consistent with aspects of the application as detailed in the accompanying claims.
The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the application. As used in this specification and the appended claims, the singular forms "a," "an," and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.
In order to better understand the technical solution provided by the embodiments of the present application and make the above objects, features and advantages of the embodiments of the present application more obvious, the technical solution in the embodiments of the present application will be described in further detail below with reference to the accompanying drawings.
Referring to fig. 1, fig. 1 is a flowchart of a method provided in an embodiment of the present application. The method is applied to an electronic device, such as a terminal, a server, etc., and the embodiment is not particularly limited.
As shown in fig. 1, the process may include the steps of:
step 101, distributing a corresponding target scanning grouping for the current virus scanning task from the existing scanning groupings.
In this embodiment, a web task management and control interface may be built based on web front-end technology. The web task management and control interface at least comprises a task new function. Based on the task creation function in the web task management and control interface, the method is applied to the step 101, and can create a task (marked as a current virus scanning task) and upload a file (i.e. a file to be scanned) which is required to be scanned by the virus and corresponds to the current virus scanning task to a designated position.
As one embodiment, the current virus scanning task includes at least: file information of the file to be scanned. Here, the file information of the file to be scanned is used to describe the file to be scanned, and may include, for example: file type, location information where the file was uploaded, etc.
Optionally, the file types at least include: the type of the large file meeting the large file requirement (denoted as large file type), the type of the small file meeting the small file requirement (denoted as small file type), or the special file type meeting the specified special file requirement. Here, the large file requirement and the small file requirement may be set according to actual requirements, for example, the large file requirement may be set such that the file size is greater than or equal to a first set threshold (such as 1G, etc.); the doclet requirement may be set such that the file size is less than or equal to a second set threshold (e.g., 1M, etc.). In this embodiment, the specific file requirement may be set according to actual requirements, for example, setting all files issued by XX branch offices as specific files, and so on.
In this embodiment, the deployed virus scanning nodes may be divided to obtain at least one scanning packet (also referred to as a virtual packet). Each scan packet includes at least one type of virus scan node, and any type of virus scan node includes at least one virus scan node. The virus scanning nodes of the same class may be virus scanning nodes (such as antivirus software) having the same virus scanning version or the same virus scanning type, etc. Each scanning node may refer to a single virtual machine, and a piece of antivirus software is deployed in the single virtual machine. Optionally, in any scanning group, a certain type of virus scanning node includes a plurality of similar virus scanning nodes, so as to facilitate load sharing, so that when one of the virus scanning nodes has insufficient performance or is busy, other virus scanning nodes with sufficient performance or idle performance in the type of virus scanning node are directly scheduled to execute the rest virus scanning tasks, and the virus scanning efficiency is improved.
Alternatively, the scanning group herein may include a scanning group designated for virus scanning of a large file satisfying a large file requirement (denoted as a large file scanning group), a scanning group designated for virus scanning of a small file satisfying a small file requirement (denoted as a small file scanning group), and a scanning group designated for virus scanning of a designated private file (denoted as a private scanning group). Fig. 2 illustrates each scan packet by taking a virus scan node as an example of antivirus software.
Based on this, in this step 101, assigning a corresponding target scan packet for the current virus scan task from the existing scan packets may include: and determining a scanning group matched with the file type from the existing scanning groups according to the file type of the file to be scanned indicated by the current virus scanning task, and determining the scanning group matched with the file type as the target scanning group.
For example, if the file type is a large file type, determining that the large file scanning group is a scanning group matched with the file type, and determining that the large file scanning group matched with the file type is the target scanning group.
For another example, if the file type is a small file type, determining that the small file scanning group is a scanning group matched with the file type, and determining that the small file scanning group matched with the file type is the target scanning group.
For another example, if the file type is a specified special file, determining that a special scanning group corresponding to the specified special file is a scanning group matched with the file type, and determining that the special scanning group matched with the file type is the target scanning group.
From the above description, the corresponding target scanning grouping is finally allocated to the current virus scanning task from the existing scanning groupings.
Step 102, checking whether the performance load of each virus scanning node in the target scanning group meets the corresponding set scanning condition according to the unprocessed task in the target task queue corresponding to the target scanning group, if yes, executing step 103, and if no, executing step 104.
In this step 102, by checking whether the performance load of each type of virus scanning node in the target scanning packet meets the corresponding set scanning condition, the purpose of the present scanning pressure of the target scanning packet is to automatically dynamically stretch and retract the target scanning packet, which is described in step 104 below, and is not repeated herein.
Optionally, in step 102, there are many ways to check whether the performance load of each type of virus scanning node in the target scanning packet meets the corresponding set scanning condition, for example, for each type of virus scanning node in the target scanning packet, if it is checked that the current performance parameter of at least one type of virus scanning node in the type of virus scanning node meets the corresponding performance parameter requirement, if it is determined that the performance load of the type of virus scanning node meets the corresponding set scanning condition, if it is checked that the current performance parameter of each type of virus scanning node in the type of virus scanning node does not meet the corresponding performance parameter requirement, it is determined that the performance load of the type of virus scanning node does not meet the corresponding set scanning condition.
In this embodiment, there are many current performance parameters of the virus scanning node, for example,: the number of remaining files that the virus scanning node is required to perform a virus scan, etc. If the current performance parameters of the virus scanning node are: the number of remaining files that the virus scanning node is required to perform virus scanning, and correspondingly, the performance parameters of the virus scanning node meet the corresponding performance parameter requirements may be: the number of remaining files requiring the virus scanning node to perform a virus scan is less than a set file number threshold.
In this embodiment, various virus scanning nodes in the target scanning packet are configured with the same scanning condition, or at least two types of virus scanning nodes in the target scanning packet are respectively configured with different scanning conditions, which is not particularly limited.
And step 103, scheduling various virus scanning nodes in the control target scanning group to process the current virus scanning task.
Step 103 is executed on the premise that step 102 checks that the performance load of each virus scanning node in the target scanning packet meets the corresponding set scanning condition. Once the performance loads of all virus scanning nodes in the target scanning group meet the corresponding set scanning conditions, the target scanning group can execute the current virus scanning task, at this time, the current virus scanning task can be issued to the target task queue, so that one virus scanning node (such as the current idle virus scanning node) in all virus scanning nodes in the target scanning group can be scheduled to read the current virus scanning task from the target task queue, and the local virus scanning software is called to perform virus scanning on a file which corresponds to the current virus scanning task and needs to be scanned, so that the current virus scanning task is processed by all virus scanning nodes in the target scanning group can be scheduled and controlled as described in step 103.
Step 104, for each type of reference virus scanning node in the target scanning group, if the performance load of each virus scanning node in the type of reference virus scanning node does not meet the corresponding set scanning condition, selecting one target virus scanning node for replacing the type of reference virus scanning node from other deployed virus scanning nodes except for each type of virus scanning node in the target scanning group, so as to replace the type of reference virus scanning node by the target virus scanning node to execute the current virus scanning task.
Step 104 is performed on the premise that step 102 checks that the performance load of at least one type of virus scanning node in the target scanning packet does not meet the corresponding set scanning condition. Here, in the target scan packet, once the performance load of a certain type of virus scan node does not meet the corresponding set scan condition, the type of virus scan node may be denoted as a type of reference virus scan node.
The step 104 is to select a target virus scanning node for replacing the reference virus scanning node from other virus scanning nodes except the various virus scanning nodes in the deployed target scanning group, so as to replace the reference virus scanning node with the target virus scanning node to execute the current virus scanning task. Because all virus scanning nodes in the reference virus scanning node are not currently available for executing the current virus scanning task, the target virus scanning node is used for replacing the reference virus scanning node to execute the current virus scanning task, the target virus scanning node can be considered to replace all virus scanning nodes in the reference virus scanning node to execute the current virus scanning task, which is equivalent to expanding a target scanning group (which is equivalent to adding a redundant node, namely the target virus scanning node to the target scanning group), and simultaneously, reducing original scanning groups (which is equivalent to reducing the redundant node, namely the target virus scanning node) where other scanning groups, such as the target virus scanning node, are located, finally, deciding whether to expand or reduce the target scanning group based on the performance load of various virus scanning nodes in the target scanning group, namely the dynamic expansion of the target scanning group is equivalent to being realized.
Thus, the flow shown in fig. 1 is completed.
As can be seen from the flow shown in fig. 1, in this embodiment, by grouping each virus scanning node, corresponding scanning groups are allocated to different virus scanning tasks according to service types of the different virus scanning tasks, and scheduling of the different virus scanning tasks is automatically implemented according to performance loads of each virus scanning node in the scanning groups;
further, in this embodiment, according to the performance load of each type of virus scanning node in the scanning packet, it is determined whether to extend the redundant virus scanning node outside the scanning packet to the scanning packet, or reduce the redundant virus scanning node in the scanning packet, so as to extend the redundant virus scanning node to other scanning packets, thereby implementing the virus scanning of the adaptive packet redundancy arrangement, and adapting to the high-concurrency virus scanning task.
The following describes how to select a target virus scanning node for replacing the reference virus scanning node from the deployed virus scanning nodes except for the various virus scanning nodes in the target scanning packet in step 104:
referring to fig. 3, fig. 3 is a flowchart of implementation of step 104 provided in an embodiment of the present application. As shown in fig. 3, the process may include the steps of:
Step 301, for each type of reference virus scanning node, if at least one virus scanning node for replacing the type of reference virus scanning node exists in the deployed idle node resource pool, determining one of the at least one virus scanning node as a target virus scanning node for replacing the type of reference virus scanning node; if there is no virus scanning node in the deployed idle node resource pool for replacing the reference virus scanning node, step 302 is performed.
In this embodiment, the idle node resource pool may also be deployed exclusively. The virus scan nodes in the idle node resource pool may not be divided into scan packets, and the idle node resource pool is used for coping with the task number surge. For example, if the number of tasks in the task queue corresponding to the small file scanning packet is increased, the virus scanning node in the idle node resource pool can be pulled into the small file scanning packet for coping with the small file scanning task peak. Fig. 2 illustrates an idle node resource pool.
Based on the idle node resource pool shown in fig. 2, it may be checked, for each type of reference virus scanning node, whether there is at least one virus scanning node in the idle node resource pool for replacing the type of reference virus scanning node. Here, the virus scanning node used for replacing the reference virus scanning node has the same virus scanning type or virus scanning version as the original virus scanning node in the reference virus scanning node, so long as the reference virus scanning node can be replaced, and the embodiment is not particularly limited.
If at least one virus scanning node for replacing the reference virus scanning node exists in the idle node resource pool, determining one of the at least one virus scanning node as a target virus scanning node for replacing the reference virus scanning node; at this point, the target virus scanning node may be supplemented to the target scanning packet.
Of course, if there is no virus scanning node in the idle node resource pool for replacing the reference virus scanning node, for example, at the present moment, it may be found that each virus scanning node in the idle node resource pool is occupied or is scheduled to other scanning packets, at this time, it may be considered that there is no at least one virus scanning node in the idle node resource pool for replacing the reference virus scanning node, and step 302 is performed.
Step 302, selecting one of the virus scanning nodes which is used for replacing the reference virus scanning node and meets the set condition from other scanning groups except the target scanning group as the target virus scanning node; the setting conditions are as follows: there are currently no virus scan tasks that are not performed, or the priority of the remaining virus scan tasks that are not performed is lower than the priority of the current virus scan task.
This step 302 is performed on the premise that there is no at least one virus scanning node in the idle node resource pool to replace the reference virus scanning node. On this premise, as depicted in step 302, an attempt may be made to select one of the virus scan nodes that is used to replace the reference virus scan node and satisfies the condition from other scan packets than the target scan packet.
As one example, there are many ways how a virus scan node can be selected from other scan packets, such as depending on task importance level selection. Optionally, the virus scanning node in which the non-executed virus scanning task does not exist in the other scanning packet is selected, or the non-executed virus scanning task in the other scanning packet is selected, but the priority of the non-executed virus scanning task is lower than the priority of the current virus scanning task, and the like, and the embodiment is not particularly limited.
Optionally, in this embodiment, one of the virus scanning nodes that is used to replace the reference virus scanning node and satisfies the condition is selected from the other scanning groups except the target scanning group, and after being used as the target virus scanning node, the target virus scanning node may be supplemented to the target scanning group, so that the current virus scanning task is executed by replacing the reference virus scanning node with the target virus scanning node.
Thus, the flow shown in fig. 3 is completed.
The process shown in fig. 3 realizes that for each type of reference virus scanning node, one target virus scanning node for replacing the type of reference virus scanning node is selected from other deployed virus scanning nodes except for each type of virus scanning node in the target scanning group.
It should be noted that, in this embodiment, if the target virus scanning node for replacing the reference virus scanning node does not exist in the other scanning packets, then a manual negotiation may be initiated to trigger dragging the target virus scanning node for replacing the reference virus scanning node in the other scanning packets to the target scanning packet in the graphical layout page.
In this embodiment, a node management Web (also referred to as a graphical layout page) may be pre-built, where the graphical layout page supports graphical layout capability, based on the graphical layout capability supported by the graphical layout page, a drag of a target virus scanning node used for replacing the reference virus scanning node in other scanning groups to the target scanning group may be triggered in the graphical layout page, so as to ensure the overall virus scanning capability. Here, the target virus scanning node may be determined based on the priorities of the remaining virus scanning tasks that the node has not performed, for example, selecting the lowest priority of the remaining virus scanning tasks as the target virus scanning node.
In this embodiment, after the current virus scanning task is executed by replacing the reference virus scanning node with the target virus scanning node, the target virus scanning node may be further released, so that when the target virus scanning node is originally a virus scanning node in the idle node resource pool, the target virus scanning node is recycled to the idle node resource pool, and when the target virus scanning node is originally a virus scanning node in other scanning groups, the target virus scanning node is recycled to the other scanning groups.
Optionally, in this embodiment, the web task management and control interface may further include functions of task detail display, task state control (such as running, stopping, debugging, editing, timing), task execution speed control, data statistics, and the like, which may be specifically set according to actual requirements, and this embodiment is not limited specifically.
In addition, in this embodiment, the above-mentioned virus scanning node may be displayed through a node management module page, where the node management module page may be constructed based on a web front-end technology. Of course, the node management module page may also simultaneously display information about the status of each virus scanning node, such as whether a task (virus scanning, etc.) is currently being performed, a virus scanning task that has been performed, and remaining virus scanning tasks that have not been performed. Optionally, if the virus scanning node is newly added or deleted according to the actual requirement, the newly added virus scanning node can be further added on the page of the node management module, and the corresponding virus scanning node can be displayed or deleted.
In this embodiment, the result of processing the virus scanning task by each virus scanning node may also be displayed, for example, the result of the virus scanning task is displayed through a result display page. The results presentation page herein may be built based on web front-end technology.
In this embodiment, the data storage module may also be configured based on various databases, and is used to store task data, operation data, virus scanning result data, and user data, where the data storage module supports databases such as mysql, sqlite, mongodb, redis, elasticsearch.
The method provided by the embodiment of the present application is described above, and fig. 4 illustrates the method provided by the embodiment by way of example.
The following describes a device provided by an embodiment of the present application:
referring to fig. 5, fig. 5 is a block diagram of an apparatus according to an embodiment of the present application. As shown in fig. 5, the apparatus includes:
the distribution module is used for distributing corresponding target scanning groups for the current virus scanning task from the existing scanning groups;
the task management module is used for checking whether the performance load of each virus scanning node in the target scanning group meets the corresponding set scanning condition according to the unprocessed task in the target task queue corresponding to the target scanning group; any type of virus scanning node comprises at least one virus scanning node; the method comprises the steps of,
When at least one type of reference virus scanning nodes exist in a target scanning group, if the performance load of each virus scanning node in the type of reference virus scanning nodes does not meet the set scanning conditions corresponding to the type of reference virus scanning nodes, selecting one target virus scanning node for replacing the type of reference virus scanning nodes from other deployed virus scanning nodes except for the type of virus scanning nodes in the target scanning group;
the task scheduling module is used for checking that the performance loads of all virus scanning nodes in the target scanning group meet corresponding set scanning conditions in the task management module, and scheduling and controlling all virus scanning nodes in the target scanning group to process the current virus scanning task; the method comprises the steps of,
and when the task management module detects that at least one type of reference virus scanning node exists in the target scanning group, the target virus scanning node is scheduled to replace the type of reference virus scanning node to execute the current virus scanning task.
Optionally, the current virus scanning task indicates file information of a file to be scanned; the file information includes at least: a file type; the file types at least comprise: a large file type meeting the requirement of a large file, or a small file type meeting the requirement of a small file, or a special file type meeting the requirement of a specified special file; the large file type is matched with the deployed large file scanning grouping, and the small file type is matched with the deployed small file scanning grouping; the special file type matches a special scanning packet;
The allocation of the corresponding target scanning grouping for the current virus scanning task from the existing scanning groupings comprises the following steps:
and determining a scanning group matched with the file type from the existing scanning groups according to the file type of the file to be scanned indicated by the current virus scanning task, and determining the scanning group matched with the file type as the target scanning group.
Optionally, the checking whether the performance load of each virus scanning node in the target scanning packet meets the corresponding set scanning condition includes: and aiming at each virus scanning node in the target scanning group, if at least one virus scanning node in the virus scanning nodes is checked to meet the corresponding performance parameter requirement, determining that the performance load of the virus scanning node meets the corresponding set scanning condition, and if the current performance parameters of all virus scanning nodes in the virus scanning nodes are checked to not meet the corresponding performance parameter requirement, determining that the performance load of the virus scanning node does not meet the corresponding set scanning condition.
Optionally, the selecting a target virus scanning node used for replacing the reference virus scanning node from other deployed virus scanning nodes except for various virus scanning nodes in the target scanning group includes:
For each type of reference virus scanning node, if at least one virus scanning node for replacing the type of reference virus scanning node exists in the deployed idle node resource pool, determining one of the at least one virus scanning node as a target virus scanning node for replacing the type of reference virus scanning node; if the deployed idle node resource pool does not contain the virus scanning node for replacing the reference virus scanning node, the method comprises the following steps:
selecting one of the virus scanning nodes which is used for replacing the reference virus scanning nodes and meets the set condition from other scanning groups except the target scanning group as the target virus scanning node; the setting conditions are as follows: currently, no unexecuted virus scanning task exists, or the priority of currently existing unexecuted residual virus scanning tasks is lower than the priority of the current virus scanning task;
optionally, if the target virus scanning node for replacing the reference virus scanning node does not exist in the other scanning groups, the task management module further triggers dragging the target virus scanning node for replacing the reference virus scanning node in the other scanning groups to the target scanning group in the graphical layout page.
Optionally, after the replacing the reference virus scanning node with the target virus scanning node performs the current virus scanning task, the task management module further includes: releasing the target virus scanning node, so that the target virus scanning node is recycled to the idle node resource pool when the target virus scanning node is originally a virus scanning node in the idle node resource pool, and the target virus scanning node is recycled to the other scanning groups when the target virus scanning node is originally a virus scanning node in the other scanning groups.
The structural description of the apparatus shown in fig. 5 is thus completed.
Based on the same application concept as the method, the embodiment of the application also provides a hardware structure description of the device shown in fig. 5. As shown in fig. 6, the hardware structure may include: a processor and a machine-readable storage medium. Here, a machine-readable storage medium has stored thereon computer instructions which, when executed by a processor, implement the steps in the above method.
Based on the same application concept as the above method, the embodiment of the present application further provides a machine-readable storage medium, where a number of computer instructions are stored, where the computer instructions can implement the method disclosed in the above example of the present application when executed by a processor.
By way of example, the machine-readable storage medium may be any electronic, magnetic, optical, or other physical storage device that can contain or store information, such as executable instructions, data, and the like. For example, a machine-readable storage medium may be: RAM (Radom Access Memory, random access memory), volatile memory, non-volatile memory, flash memory, a storage drive (e.g., hard drive), a solid state drive, any type of storage disk (e.g., optical disk, dvd, etc.), or a similar storage medium, or a combination thereof.
The system, apparatus, module or unit set forth in the above embodiments may be implemented in particular by a computer or an entity, or by an article of manufacture having a certain function. A typical implementation device is a computer, which may be in the form of a personal computer, laptop computer, cellular telephone, camera phone, smart phone, personal digital assistant, media player, navigation device, email device, game console, tablet computer, wearable device, or a combination of any of these devices.
For convenience of description, the above devices are described as being functionally divided into various units, respectively. Of course, the functions of each element may be implemented in the same piece or pieces of software and/or hardware when implementing the present application.
It will be appreciated by those skilled in the art that embodiments of the present application may be provided as a method, system, or computer program product. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, embodiments of the application may take the form of a computer program product on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.
The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flowchart illustrations and/or block diagrams, and combinations of flows and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
Moreover, these computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
The foregoing is merely exemplary of the present application and is not intended to limit the present application. Various modifications and variations of the present application will be apparent to those skilled in the art. Any modification, equivalent replacement, improvement, etc. which come within the spirit and principles of the application are to be included in the scope of the claims of the present application.
Claims (10)
1. A method for scanning viruses for adaptive packet redundancy orchestration, the method comprising:
distributing corresponding target scanning groups for the current virus scanning task from the existing scanning groups; the current virus scanning task at least includes: file information of a file to be scanned, wherein the file information of the file to be scanned is used for describing the file to be scanned, and the file information at least comprises: a file type; the target scanning grouping refers to a scanning grouping matched with a file type, the target scanning grouping comprises multiple virus scanning nodes, any virus scanning node comprises at least one virus scanning node, and the virus scanning nodes in the same class have the same virus scanning version or the same virus scanning type;
checking whether the performance load of each virus scanning node in the target scanning group meets the corresponding set scanning condition according to the unprocessed task in the target task queue corresponding to the target scanning group;
if the performance loads of all virus scanning nodes in the target scanning group meet the corresponding set scanning conditions, scheduling and controlling all virus scanning nodes in the target scanning group to process the current virus scanning task;
If at least one type of reference virus scanning node exists in the target scanning group, the performance load of each virus scanning node in the type of reference virus scanning node does not meet the set scanning conditions corresponding to the type of reference virus scanning node, selecting one target virus scanning node for replacing the type of reference virus scanning node from other deployed virus scanning nodes except for the type of virus scanning node in the target scanning group for each type of reference virus scanning node, and executing the current virus scanning task by utilizing the target virus scanning node to replace the type of reference virus scanning node.
2. The method according to claim 1, wherein the file types include at least: a large file type meeting the requirement of a large file, or a small file type meeting the requirement of a small file, or a special file type meeting the requirement of a specified special file; the large file type is matched with the deployed large file scanning grouping, and the small file type is matched with the deployed small file scanning grouping; the special file type matches a special scanning packet;
the allocation of the corresponding target scanning grouping for the current virus scanning task from the existing scanning groupings comprises the following steps:
And determining a scanning group matched with the file type from the existing scanning groups according to the file type of the file to be scanned indicated by the current virus scanning task, and determining the scanning group matched with the file type as the target scanning group.
3. The method of claim 1, wherein the checking whether the performance load of each type of virus scanning node in the target scanning packet meets the corresponding set scanning condition comprises:
and aiming at each virus scanning node in the target scanning group, if at least one virus scanning node in the virus scanning nodes is checked to meet the corresponding performance parameter requirement, determining that the performance load of the virus scanning node meets the corresponding set scanning condition, and if the current performance parameters of all virus scanning nodes in the virus scanning nodes are checked to not meet the corresponding performance parameter requirement, determining that the performance load of the virus scanning node does not meet the corresponding set scanning condition.
4. The method of claim 1, wherein selecting a target virus scan node for replacing a reference virus scan node of the class from among the deployed virus scan nodes other than the classes of virus scan nodes in the target scan packet comprises:
For each type of reference virus scanning node, if at least one virus scanning node for replacing the type of reference virus scanning node exists in the deployed idle node resource pool, determining one of the at least one virus scanning node as a target virus scanning node for replacing the type of reference virus scanning node; if the deployed idle node resource pool does not contain the virus scanning node for replacing the reference virus scanning node, the method comprises the following steps:
selecting one of the virus scanning nodes which is used for replacing the reference virus scanning nodes and meets the set condition from other scanning groups except the target scanning group as the target virus scanning node; the setting conditions are as follows: there are no currently unexecuted virus scan tasks or the currently existing unexecuted remaining virus scan tasks have a lower priority than the current virus scan tasks.
5. The method of claim 4, wherein if there is no target virus scanning node in the other scanning packets that replaces the reference virus scanning node, the method further comprises:
Triggering a target virus scanning node used for replacing the reference virus scanning node in other scanning groups in the graphical programming page to drag the target virus scanning node to the target scanning group.
6. The method of claim 4 or 5, wherein after the current virus scanning task is performed by replacing the reference virus scanning node with the target virus scanning node, the method further comprises:
releasing the target virus scanning node, so that the target virus scanning node is recycled to the idle node resource pool when the target virus scanning node is originally a virus scanning node in the idle node resource pool, and the target virus scanning node is recycled to the other scanning groups when the target virus scanning node is originally a virus scanning node in the other scanning groups.
7. An adaptive packet redundancy orchestrated virus scanning apparatus, comprising:
the distribution module is used for distributing corresponding target scanning groups for the current virus scanning task from the existing scanning groups; the current virus scanning task at least includes: file information of a file to be scanned, wherein the file information of the file to be scanned is used for describing the file to be scanned, and the file information at least comprises: a file type; the target scanning grouping refers to a scanning grouping matched with a file type, the target scanning grouping comprises multiple virus scanning nodes, any virus scanning node comprises at least one virus scanning node, and the virus scanning nodes in the same class have the same virus scanning version or the same virus scanning type;
The task management module is used for checking whether the performance load of each virus scanning node in the target scanning group meets the corresponding set scanning condition according to the unprocessed task in the target task queue corresponding to the target scanning group; the method comprises the steps of,
when at least one type of reference virus scanning nodes exist in a target scanning group, if the performance load of each virus scanning node in the type of reference virus scanning nodes does not meet the set scanning conditions corresponding to the type of reference virus scanning nodes, selecting one target virus scanning node for replacing the type of reference virus scanning nodes from other deployed virus scanning nodes except for the type of virus scanning nodes in the target scanning group;
the task scheduling module is used for checking that the performance loads of all virus scanning nodes in the target scanning group meet corresponding set scanning conditions in the task management module, and scheduling and controlling all virus scanning nodes in the target scanning group to process the current virus scanning task; the method comprises the steps of,
and when the task management module detects that at least one type of reference virus scanning node exists in the target scanning group, the target virus scanning node is scheduled to replace the type of reference virus scanning node to execute the current virus scanning task.
8. The apparatus of claim 7, wherein the file types include at least: a large file type meeting the requirement of a large file, or a small file type meeting the requirement of a small file, or a special file type meeting the requirement of a specified special file; the large file type is matched with the deployed large file scanning grouping, and the small file type is matched with the deployed small file scanning grouping; the special file type matches a special scanning packet;
the allocation of the corresponding target scanning grouping for the current virus scanning task from the existing scanning groupings comprises the following steps:
and determining a scanning group matched with the file type from the existing scanning groups according to the file type of the file to be scanned indicated by the current virus scanning task, and determining the scanning group matched with the file type as the target scanning group.
9. The apparatus of claim 7, wherein the checking whether the performance load of each type of virus scanning node in the target scanning packet satisfies the corresponding set scanning condition comprises: aiming at each virus scanning node in the target scanning group, if at least one virus scanning node in the virus scanning nodes is checked to meet the corresponding performance parameter requirement, determining that the performance load of the virus scanning node meets the corresponding set scanning condition, and if the current performance parameters of all virus scanning nodes in the virus scanning nodes are checked to not meet the corresponding performance parameter requirement, determining that the performance load of the virus scanning node does not meet the corresponding set scanning condition;
The selecting a target virus scanning node for replacing the reference virus scanning node from other deployed virus scanning nodes except for various virus scanning nodes in the target scanning group comprises the following steps:
for each type of reference virus scanning node, if at least one virus scanning node for replacing the type of reference virus scanning node exists in the deployed idle node resource pool, determining one of the at least one virus scanning node as a target virus scanning node for replacing the type of reference virus scanning node; if the deployed idle node resource pool does not contain the virus scanning node for replacing the reference virus scanning node, the method comprises the following steps:
selecting one of the virus scanning nodes which is used for replacing the reference virus scanning nodes and meets the set condition from other scanning groups except the target scanning group as the target virus scanning node; the setting conditions are as follows: currently, no unexecuted virus scanning task exists, or the priority of currently existing unexecuted residual virus scanning tasks is lower than the priority of the current virus scanning task;
If the target virus scanning nodes for replacing the reference virus scanning nodes do not exist in the other scanning groups, the task management module further triggers the target virus scanning nodes for replacing the reference virus scanning nodes in the other scanning groups to be dragged to the target scanning groups in the graphical layout page;
after the current virus scanning task is executed by replacing the reference virus scanning node with the target virus scanning node, the task management module further comprises: releasing the target virus scanning node, so that the target virus scanning node is recycled to the idle node resource pool when the target virus scanning node is originally a virus scanning node in the idle node resource pool, and the target virus scanning node is recycled to the other scanning groups when the target virus scanning node is originally a virus scanning node in the other scanning groups.
10. An electronic device, comprising: a processor and a machine-readable storage medium;
the machine-readable storage medium having stored thereon computer instructions which, when executed by a processor, carry out the steps of the method according to any of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310737029.7A CN116502225B (en) | 2023-06-20 | 2023-06-20 | Virus scanning method and device for self-adaptive packet redundancy arrangement and electronic equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202310737029.7A CN116502225B (en) | 2023-06-20 | 2023-06-20 | Virus scanning method and device for self-adaptive packet redundancy arrangement and electronic equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN116502225A CN116502225A (en) | 2023-07-28 |
| CN116502225B true CN116502225B (en) | 2023-09-19 |
Family
ID=87324988
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202310737029.7A Active CN116502225B (en) | 2023-06-20 | 2023-06-20 | Virus scanning method and device for self-adaptive packet redundancy arrangement and electronic equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116502225B (en) |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN118036007B (en) * | 2024-04-15 | 2024-09-10 | 建信金融科技有限责任公司 | Virus scanning method, system, scanner and storage medium |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103778373A (en) * | 2014-01-10 | 2014-05-07 | 深圳市深信服电子科技有限公司 | Virus detection method and device |
| CN106034040A (en) * | 2015-03-13 | 2016-10-19 | 阿里巴巴集团控股有限公司 | Scanning node control method, scanning node control device and scanning node control system |
| CN108170515A (en) * | 2017-12-29 | 2018-06-15 | 哈尔滨安天科技股份有限公司 | Multi engine control scan dynamic adjusting method and system based on hardware resource |
| CN109561060A (en) * | 2017-09-27 | 2019-04-02 | 北京国双科技有限公司 | A kind of Distributed Scans method, apparatus and system |
| CN112632566A (en) * | 2021-03-05 | 2021-04-09 | 腾讯科技（深圳）有限公司 | Vulnerability scanning method and device, storage medium and electronic equipment |
| CN113190276A (en) * | 2020-01-13 | 2021-07-30 | 奇安信科技集团股份有限公司 | Intelligent virus scanning processing method and device |
| CN115203698A (en) * | 2022-07-25 | 2022-10-18 | 北京来也网络科技有限公司 | Security vulnerability scanning task processing method based on RPA and AI and related equipment |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8544096B2 (en) * | 2003-12-30 | 2013-09-24 | Emc Corporation | On-access and on-demand distributed virus scanning |
| US8769697B2 (en) * | 2011-10-05 | 2014-07-01 | Zynga Inc. | Methods and systems for automated network scanning in dynamic virtualized environments |
-
2023
- 2023-06-20 CN CN202310737029.7A patent/CN116502225B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103778373A (en) * | 2014-01-10 | 2014-05-07 | 深圳市深信服电子科技有限公司 | Virus detection method and device |
| CN106034040A (en) * | 2015-03-13 | 2016-10-19 | 阿里巴巴集团控股有限公司 | Scanning node control method, scanning node control device and scanning node control system |
| CN109561060A (en) * | 2017-09-27 | 2019-04-02 | 北京国双科技有限公司 | A kind of Distributed Scans method, apparatus and system |
| CN108170515A (en) * | 2017-12-29 | 2018-06-15 | 哈尔滨安天科技股份有限公司 | Multi engine control scan dynamic adjusting method and system based on hardware resource |
| CN113190276A (en) * | 2020-01-13 | 2021-07-30 | 奇安信科技集团股份有限公司 | Intelligent virus scanning processing method and device |
| CN112632566A (en) * | 2021-03-05 | 2021-04-09 | 腾讯科技（深圳）有限公司 | Vulnerability scanning method and device, storage medium and electronic equipment |
| CN115203698A (en) * | 2022-07-25 | 2022-10-18 | 北京来也网络科技有限公司 | Security vulnerability scanning task processing method based on RPA and AI and related equipment |
Non-Patent Citations (1)
| Title |
|---|
| 基于虚拟节点管理的云安全漏洞扫描系统;廖金菊;冯光辉;;中国电子科学研究院学报(第05期);全文 * |
Also Published As
| Publication number | Publication date |
|---|---|
| CN116502225A (en) | 2023-07-28 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108459898B (en) | Resource recovery method and device | |
| CN116502225B (en) | Virus scanning method and device for self-adaptive packet redundancy arrangement and electronic equipment | |
| CN103631661A (en) | Internal storage management method and device | |
| US10884667B2 (en) | Storage controller and IO request processing method | |
| US11886905B2 (en) | Host upgrade method and device | |
| CN111522659B (en) | Space use method and device | |
| CN101661486A (en) | Method and system for fragment sorting for hard disk of host comprising virtual computer | |
| CN112463290A (en) | Method, system, apparatus and storage medium for dynamically adjusting the number of computing containers | |
| CN113961346A (en) | Data cache management and scheduling method and device, electronic equipment and storage medium | |
| CN104252386A (en) | Data update locking method and equipment | |
| CN113515376A (en) | Memory management method and device, electronic equipment and storage medium | |
| CN113760549A (en) | Pod deployment method and device | |
| CN112230936A (en) | Container group deployment method and device and server | |
| CN113254223B (en) | Resource allocation method and system after system restart and related components | |
| CN112559115A (en) | Method, device and equipment for deleting container mirror image | |
| CN107480071B (en) | Cache data migration method and device | |
| CN112650693B (en) | Static memory management method and device | |
| CN113986458A (en) | Container set scheduling method, device, equipment and storage medium | |
| CN112685334A (en) | Method, device and storage medium for block caching of data | |
| CN114691283A (en) | Method and device for managing instances and cloud application engine | |
| CN109471731A (en) | A kind of data processing, EMS memory management process, device, equipment and medium | |
| US20200151001A1 (en) | Accelerator control device, accelerator control method, and recording medium with accelerator control program stored therein | |
| CN104461382A (en) | Internal writing method for file server operating multiple file systems and server | |
| CN115150402B (en) | Cloud resource allocation method and system | |
| US11630776B2 (en) | Methods and systems for fast allocation of fragmented caches |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |