Anti-malware protection operation with instruction included in an operand

摘要

Disclosed is a system and method for extending anti-malware protection to systems having multiple storage devices, such as RAID. In embodiments, a trusted connection may be established between a host and a controller of the multiple storage devices. The trusted connection may use various information encryption techniques to undermine attempts by malware to preserve malware-infected locations on the storage devices by redirecting anti-malware protection related operations by the host. Through an encrypted and trusted connection between the host and a controller of the multiple storage devices, anti-virus and/or anti-malware software (hereinafter, AVS) may transmit encrypted anti-malware protection related operations to the controller of the multiple storage devices, overcoming detection and/or diversion by the malware. Other embodiments may be described and claimed.

主权项

1. At least one non-transitory computer-readable storage medium having a plurality of instructions to enable a controller of a plurality of storage devices, in response to execution of the instructions by the controller, to:
receive a first instruction from a host computing device coupled with the controller, wherein the first instruction includes a first address and an operand, wherein the first instruction is nominally associated with an anti-malware protection related operation, and the first address refers to first one or more storage locations of the plurality of storage devices; recover from the operand, a second instruction to be operated on second one or more storage locations of the plurality of storage devices, wherein the second instruction is substantively associated with the anti-malware protection related operation, and the first and second one or more storage locations differ by at least one storage location; and execute the second instruction to operate on the second one or more storage locations to effectuate the anti-malware protection related operation, wherein the anti-malware protection related operation is one of a read operation or a write operation to be performed on the second one or more storage locations, and wherein for a read operation the instructions are further to enable the controller to: assemble data read from the second one or more storage locations to form assembled data; and return the assembled data to the host computing device, as read output data of the first instruction, and wherein for a write operation the instructions are further to enable the controller to: store data in a striped manner in the second one or more storage locations.