Wednesday, August 1, 2007

An Introduction to ARIZ

Author: Umakant Mishra
Abstract:
ARIZ- the Algorithm of Inventive Problem Solving, is a part of TRIZ. It is not as popularly used as other methods in TRIZ. The steps in ARIZ are difficult to follow and requires more intellectual effort. This method is used only to solve complex problem which are not solved by applying other methods of TRIZ. It is a tool for thinking in alternative directions to solve complex and non-standard problems.

From another point of view, ARIZ is a method of problem solving by redefining and restructuring the problem. Although problems can be solved by using other methods, it is better to evaluate the method of solution using ARIZ. ARIZ moves you back and forth on the functional domains of the super-system, the system and subsystem in order to ensure that the derived solution does not create any problem for the super-system or sub-systems.

Keywords: TRIZ, ARIZ, Altshuller, Innovation, Inventive Problem Solving, Algorithm of problem solving, Ideality, Contradiction, Resources, Inventive Standards, Standard Solutions, Inventive solutions, system resources,


Mishra, Umakant, An Introduction to ARIZ (February 10, 2013). Available at SSRN: http://ssrn.com/abstract=2214558 or http://dx.doi.org/10.2139/ssrn.2214558

The Concept of Resources in TRIZ

Author: Umakant Mishra
Abstract:
An ideal system should have all advantages and no harms. If the resources consumed are expensive than the output produced then the invented system becomes ridiculous. The objective should be to use least amount of resources, cheapest resources, easily available resources and resources available within the system.

Every system intends to achieve a main useful function. The use of resources should target to improve its main useful function. If certain parts of a system or certain resources lead to unwanted functions or harmful effects then that part of the system needs to be modified and those resources need to be substituted. If a system can utilize unwanted functions and harmful effects to produce useful functions then the system is considered magical and revolutionary.

Keywords: TRIZ, Altshuller, Innovation, Inventive Problem Solving, Ideality, Contradiction, Resources, Effects, Inventive Standards, Standard Solutions, Inventive solutions, free resources, system resources, external resources, environmental resources, ideal resources


Mishra, Umakant, The Concept of Resources in TRIZ (February 5, 2013). Available at SSRN: http://ssrn.com/abstract=2212093 or http://dx.doi.org/10.2139/ssrn.2212093



Sunday, July 1, 2007

Controlling Virus Infections in Internet and Web Servers- A TRIZ based analysis

Author: Umakant Mishra
Abstract:
The viruses not only infect the stand-alone machines or client machines but also infect the web servers. When the web servers are infected with viruses, they disseminate infected content and thereby infect the client computers. The conventional anti-virus programs can run only on one machine. There is no way that an anti-virus in the client machine can determine whether the content of a website is virus safe or not. Hence, different methods are implemented to prevent the client computer from being infected by the infected content of a web server.

One proposed efficient method is to get scanned by the search engines and display the reliability of the content along with the search results (Patent 6721721). Looking at the reliability status in the search results, the user knows which web pages are reliable and which web pages are not reliable. Similarly, another proposed efficient method is to use a certificate server to certify the content of the web servers. This also helps users to know which content is virus-scanned (and hence reliable) and which content is not (Patent 7107618).

Keywords: computer virus, anti-virus, anti-virus software, computer vulnerability, computer security, anti-virus design, anti-virus development, virus scanning, virus infection, virus detection, signature scanning, integrity checking, heuristic scanning, emulation, activity monitoring, generic scanning, network scanning, server scanning,


Mishra, Umakant, Controlling Virus Infections in Internet and Web Servers- A TRIZ Based Analysis (June 1, 2012). Available at SSRN: http://ssrn.com/abstract=2071960 or http://dx.doi.org/10.2139/ssrn.2071960


Inventions on Generic Detection of Computer Viruses- A TRIZ based analysis

Author: Umakant Mishra
Abstract:
The conventional methods of signature scanning and heuristic testing depend on prior knowledge of individual virus signatures and virus behaviors. Hence these methods are capable of detecting only the known viruses or viruses behaving in known ways. Hence, these methods cannot detect the viruses unless they are created, released and infected the innocent users. This situation creates the need for generic detectors that can detect even the new and unknown viruses.

The generic scanning methods, in contrast, don’t depend on individual virus signatures or behaviors. Hence they are better applicable to detect the new and unknown viruses and viruses of new and unknown behavior. The other advantage of generic methods is that they don’t require updating of virus databases periodically. The popular generic methods include integrity checking and heuristic scanning. Integrity checking may include verification of program size, verification of checksum, verification of revision information, verification of disk address, verification of object program and others. 

However, generic methods are not easy to implement. It is difficult to analyze a large number of features of the viruses to build virus classifiers in order to determine an executable data whether “infected” or “not-infected”. Besides, this method is not so guaranteed as signature scanning. Hence, there is possibility of many viruses escaping through this method of detection. There are continuous efforts to make the generic methods more accurate and reduce the number of false negatives and false positives.

Keywords: computer virus, anti-virus, anti-virus software, computer vulnerability, computer security, anti-virus design, anti-virus development, inoculation, virus scanning, virus detection, signature scanning, integrity checking, heuristic scanning, generic scanning, behavior monitoring, resident scanning,


Mishra, Umakant, Inventions on Generic Detection of Computer Viruses- A TRIZ Based Analysis (June 1, 2012). Available at SSRN: http://ssrn.com/abstract=2071922 or http://dx.doi.org/10.2139/ssrn.2071922

Friday, June 1, 2007

Implementing Virus Scanning in Computer Networks

Author: Umakant Mishra
Abstract:
Some viruses exploit the features and capabilities of computer networks to spread, operate and damage network environments. For example, the virus may copy itself to other computers in the network or may increase network activities congesting the network traffic. The conventional anti-viruses are not efficient enough to detect and control viruses in a network environment. As they are file based they cannot scan the data while being downloaded from the server.

Most of the drawbacks of conventional scanning are taken care by a firewall-based virus scanning. But this method requires high-end machines to withstand the load of centralized scanning. There is another limitation of firewall based scanning. Implementing anti-virus into the firewall prevents outside viruses entering from the Internet but fails to provide protection from viruses spreading within the LAN.

A network virus scanner should be specially designed in order to protect computers in a network environment. It should have capability to scan the data while being transferred from server to client or from one computer to other in order to prevent transfer of infected data. The anti-virus should be capable of controlling virus-outbursts to prevent other commuters in the network from being infected. The article illustrates 10 interesting inventions from US patent database dealing with scanning viruses in a network.

Keywords: computer virus, anti-virus, anti-virus software, computer vulnerability, computer security, anti-virus design, anti-virus development, inoculation, virus scanning, virus detection, signature scanning, integrity checking, heuristic scanning, emulation, activity monitoring, generic scanning, behavior monitoring, network scanning, server scanning, computer worms, firewall, worm communication


Mishra, Umakant, Implementing Virus Scanning in Computer Networks (May 1, 2012). Available at SSRN: http://ssrn.com/abstract=2049313 or http://dx.doi.org/10.2139/ssrn.2049313

Methods of scanning Email Viruses - Applying TRIZ to improve anti-virus programs

Author: Umakant Mishra
Abstract:
An email virus makes use of the email technology and attaches itself to an email to transfer itself from one computer to another. Some email viruses create and send new emails using the address book of the victim computer. The email viruses are a matter of concern as they can spread very fast via emails to different geographical locations.

The conventional scanners are file based and not good for scanning emails as the emails can contain different types of files as attachments. Besides they cannot detect viruses until the emails are downloaded and opened by the recipient in order to be scanned in the receiver’s machine. Scanning emails on the email servers is difficult as the emails on email servers are encrypted for privacy purposes and not accessible to virus scanners. Besides, detecting virus emails is confusing as they often originate from genuine addresses.

The advanced virus scanners use various special techniques to scan the emails at various stages on the way before the infected mails can reach the recipient. The advanced methods not only deal with email virus detection and removal but also detect and control the outbreaks of email viruses.

Keywords: Software Innovation, computer virus, anti-virus, anti-virus software, computer vulnerability, computer security, anti-virus design, anti-virus development, email scanning, virus scanning, virus detection, signature scanning, integrity checking, heuristic scanning, server scanning, generic scanning, behavior monitoring, resident scanning,


Mishra, Umakant, Methods of Scanning Email Viruses: Applying TRIZ to Improve Anti-Virus Programs (May 1, 2012). Available at SSRN: http://ssrn.com/abstract=2049248 or http://dx.doi.org/10.2139/ssrn.2049248



Tuesday, May 1, 2007

Detecting Macro Viruses - A TRIZ Based Analysis

Author: Umakant Mishra
Abstract:
The macro viruses are easy to create but difficult to detect. Even for a virus scanner it is difficult to decide which macro is a virus and which macro is not, as a user macro may also create files, send emails and do all such activities that a macro virus can do. It is difficult to differentiate a genuine macro and a virus macro as both of them do similar type of jobs. Suspecting a macro to be virus just because it is “writing to a file” may result in false positives. It is necessary to improve the emulation method, like statically analyzing macro operations within a document, to save system resources and detect macro viruses more effectively.

Signature scanning can detect macro viruses. But this method is not very effective as there are plenty of new macro viruses created on every day whose signatures are yet to be updated in the signature database. Integrity checking does not work for detecting macro viruses, as comparing checksums is not possible for document files, which are usually modified by users on a regular basis. A heuristic scanning is most effective to detect macro viruses of all types, old and new. The heuristic technique does not require exact signatures of known viruses. It just examines a target program and analyzes its code to determine if the code appears virus-like.

Keywords: computer virus, anti-virus, anti-virus software, computer security, anti-virus design, anti-virus development, inoculation, virus scanning, virus detection, signature scanning, integrity checking, heuristic scanning, emulation, activity monitoring, generic scanning, behavior monitoring, resident scanning, virus database, macro virus, word macro,


Mishra, Umakant, Detecting Macro Viruses- A TRIZ Based Analysis (January 9, 2012). Available at SSRN: http://ssrn.com/abstract=1981892 or http://dx.doi.org/10.2139/ssrn.1981892