DETECTION AND ALERTING OF VIRUSES IN A SHARED READ-ONLY FILE SYSTEM

摘要

A system provides sharing of read-only file systems while at the same time providing each client of the read-only file system the ability to write to its own data store (Figure 2, System 200). Files can be either on a read-only persistent repository file system (Figure 2, Persistent View FS 210/220/226), or on a writeable persistent overlay file system(Figure 2, Persistent Respiratory FS Instance (memory) 208/218/224). An "optimistic sharing" paradigm means that by default, everything on the file system is assumed to be read-only (Figure 2, MapFS Implementation 212). If an attempt is made to modify a file-that is, a private copy is needed-the performance hit is typically minimal, because most written-to files are small. Even in the event of a larger file, the performance hit is a one-time cost. By intercepting attempts to write to files that should not be written to, viruses can be detected and alerts generated.