-
Notifications
You must be signed in to change notification settings - Fork 1
Performance Optimization
Emirhan Uçan edited this page Jul 5, 2026
·
3 revisions
HydraDragonAV Mobile is designed for efficient performance on mobile devices with limited resources.
The Photon engine uses ConcurrentHashMap-based caching to instantly re-verify previously scanned safe applications with zero CPU overhead.
How it works:
- When an app is scanned and found clean, its SHA-256 hash and verdict are cached.
- On subsequent scans (including real-time monitoring), the cache is checked first.
- If the app's hash hasn't changed, the cached verdict is returned immediately — no signature matching, no ML scoring, no I/O.
- The cache is thread-safe (
ConcurrentHashMap) for concurrent access from multiple scan threads.
Impact: Previously-scanned safe apps are verified in microseconds instead of milliseconds.
- All scan operations use a bounded thread pool to prevent CPU oversubscription.
- Archive extraction and decompression run on separate threads from signature matching.
- ML model scoring is parallelized where possible.
| Component | Strategy |
|---|---|
| XOR filter | Loaded once into memory (~10-20 MB) for O(1) whitelist lookups |
| XOR filters (URL/IP) | Memory-mapped for fast URL/IP lookups |
| ClamAV database | Stream-loaded; not fully resident in memory |
| ML models | Loaded on first scan, cached for subsequent scans |
| TLSH database | Disk-backed; queried on demand |
- GuardService: Foreground service with minimal CPU usage when idle. Wakes only on file system changes.
- ScreenCaptureService: Configurable capture interval (default: every 30 seconds). Can be disabled entirely.
- Web Shield (VPN): DNS filtering only — no traffic processing. Minimal battery impact.
- All detectors: Individually toggleable from Settings. Users can disable components they don't need.
| Setting | Default | Range | Impact |
|---|---|---|---|
| Max file scan size | 500 MB | 10–2048 MB | Larger = more memory per scan |
| Screen capture interval | 30s | 10–300s | Shorter = more battery use |
| Real-time monitoring | Enabled | On/Off | Disabling saves battery |
| Zero-Trust Mode | Disabled | On/Off | Enabling adds extra checks |
| Unicorn emulation | Enabled | On/Off | Disabling saves CPU on scans |
- Architecture — System design
- Detection-Engines — Engine overview