Research And Implementation Of An Agent Baseddistributed Anti-Virus System

The computer technology has been developing rapidly, and it brings people greatly convenience and efficiency. The development and prevalence of network enhance the computers, which have been involved in every field in social life, and computers have become indispensable. However, computer virus appeared and spread, and brings great threat to computer systems. High speed LAN provides the virus an ideal highway, and enabled the virus to spread rapidly and easily.Antivirus technology emerged as the times require, and developed while combating with the virus. All kinds of new virus appear continuously, made the present antivirus software passive and slow to react. Only when virus is scan or launched, it can be detected, so the antivirus softs become incapable for cross infection. The traditional whole-disk-scanning is inefficient and the hit-rate is very low.Therefore, this article is going to discuss a LAN area antivirus software architecture.As a general rule, specific virus has similar traces of characters in different hosts, such as, the same process name, or residenting in the specific system directory. We can make use of the common ground. So as long as one client has detected this specific virus, the related information can be collected, and other computers will be able to carry out an exact scan by sharing the information. By doing this, the other computers can easily find the latent virus, and the whole-disk-scan taking time and energy will be avoided.The mobile agent has many characteristics such as independence, mobility, and intelligence. In addition, a mobile agent does not depend on network connection, so it can save the network resource and reduce the repetitive data transmition. Therefore, we are going to take the mobile agent as the way to share and transmit information. The mobile agent is able to migrate among hosts, and confirm the next mission according to the current state.This system uses C/S structure, and has the advantages of distribution and agent technology, with excellent information-sharing ability. There are one server and some clients. The clients have basic functions of antivirus software. When a client detects some kind of virus, it will transmit all the information to the server by sending a Reporter_Agent; then the server encapsulates the information into a Cleaner_Agent, and sends it to the clients. Finally, all hosts are able to share the information and to carry out an exact scan.