%0 Journal Article %A CHEN Lin %A CHEN Xing-shu %A LI Hui %A YIN Xue-yuan %T A Method to Implement File Antivirus Based on Virtualization %D 2018 %R 10.13190/j.jbupt.2017-192 %J Journal of Beijing University of Posts and Telecommunications %P 50-55 %V 41 %N 2 %X To solve the performance overhead and resource consumption brought by an antivirus software when performing operations of virus scanning and virus database updating, an antivirus framework named HyperAV based on virtualization was proposed. HyperAV was able to provide antivirus capability for virtual machine files with low performance overhead, a mechanism of access control and isolation at the granularity of sector level was also provided. The process of virus scanning was optimized by monitoring the sector change information of a running virtual machine, which had a significant acceleration effect to the virus scanning process of virtual machines. HyperAV was constructed by a front and a rear end with each used as a controller and an antivirus worker, the data needed by antivirus software was redirected to server clusters so that duplications of virus database updating could be avoided, and performance overload brought by antivirus software running inside virtual machines was avoided. A prototype system based on kernel-based virtual machine virtualization platform was realized, the results showed that HyperAV was able to provide antivirus capability with low performance overload for virtual machines. %U https://journal.bupt.edu.cn/EN/10.13190/j.jbupt.2017-192