Nfware, Inc.

Ao Kaspersky Lab

Igor O Pavlov

Ilya B Godunov

Denis O Vlaznev

Evgeny S Semenov

Alexander S Saliev

Pavel Ivashchenko

Alexander Britkin

Alexander V Sizov

Viacheslav Morozov

Disclosed herein are systems and methods for optimizing antivirus scanning of files on virtual machines. In one aspect, an exemplary method comprises, determining whether there is a record about a file in a verdict cache, when there is, assigning the verdict found in the verdict cache to the file, and when no record is found in the verdict cache, determining whether the file is currently being scanned in a parallel thread, when the file is currently being scanned in a parallel thread, blocking the scanning of the file until the scanning in the parallel thread is completed, and placing a result of the scanning in the parallel thread in the verdict cache, and when the file is not currently being scanned in a parallel thread, performing the scanning of the file on a current thread, and placing a result of the scanning on the current thread in the verdict cache.

System and method of optimizing antivirus scanning of files on virtual machines

A system and method for processing a data packet. The method comprises initiating processing of a received plurality of data packets by CPU cores; tracking, by a scale management routine, processing queues for the CPU cores and their load. In response to an average size of a processing queue being lower than a first pre-determined queue threshold, and a CPU core load being lower than a first pre-determined load threshold, preventing adding new data packets to the processing queue, monitoring emptying of processing queues for each processing CPU core. In response to an average size of a processing queue or a CPU core load being above a second pre-determined upper queue threshold or the second pre-determined load threshold, transmitting all data from processing queues for each processing CPU core to a memory buffer, increasing the number of processing cores by one; and initiating data packet processing.

Method for distributing load in a multi-core system

A method of processing data packets, the method executable by a router. The method comprises receiving an indication of a UDP port number associated with a port used by a DNS server and a session duration for the port; receiving a UDP packet; in response to a destination port of the UDP packet matching the DNS port number, sending by a NAT component of the router, the UDP packet to an ALG DNS handler of the router. The method further comprises analyzing, by the ALG DNS handler, a payload length of the at least one UDP packet and verifying whether the UDP packet meets a processing condition. The method further comprises determining a DNS packet type.

Method for processing packets using ALG DNS

Growing community of inventors

Moscow, Russia

Igor O Pavlov