In one particular aspect, the antivirus check methods may be performed either serially, according to a queue assigned by the control module 160, or in parallel. If the methods are performed in parallel, after a decision is made by a particular method and if this decision is sufficient for the agent 170 to make a final decision, the other methods are interrupted and finished (including methods which were delegated for performance to other components of the antivirus system 200).
In yet another particular aspect, the control module 160 while forming the queue of methods may specify the time to begin the performance of each method. For example, to perform one method only upon finishing of another one, or a parallel performance of methods, especially if the methods are performed by different components.
FIG. 3 shows the algorithm of one particular aspect of the working of the system for distributing antivirus checking tasks among the components of an antivirus system residing on different virtual machines in a virtual environment. In step 310 the antivirus agent 170 on the VM 150 identifies at least one event occurring in the operating system 155 on the given VM 150 residing in the virtual environment 120. After this, the antivirus agent 170 in step 320 determines the object pertaining to the identified event, and with the aid of the informational database 240 it determines the type of said object. By object is meant at least a file, a process occurring in the time of execution of the file, or a hyperlink pointing to a particular object on the Internet.
本文来自电脑杂谈,转载请注明本文网址:
http://www.pc-fly.com/a/jisuanjixue/article-50822-18.html
笑起来很好声音也很好一句话咯加油