Unlock instant, AI-driven research and patent intelligence for your innovation.

Detection of compromise through automated power analysis

A technology for power consumption and data processing equipment, applied in the field of computer implementation, computer program product, power consumption mode of at least one application, power consumption mode system field, and can solve the problems of difficulty in identifying and interpreting power signals.

Pending Publication Date: 2021-03-16
KYNDRYL INC
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

In this case, detecting anomalies based on power consumption is even more challenging because each guest OS runs one or more different applications and thus exhibits different power usage patterns
In addition to the mix of application patterns, power usage patterns from the hypervisor (swapping in and out of the OS and associated applications) make the overall power signal more difficult to identify and interpret

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Detection of compromise through automated power analysis
  • Detection of compromise through automated power analysis
  • Detection of compromise through automated power analysis

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0042] In the context of this specification, the following conventions, terms and / or expressions may be used:

[0043] The term "power consumption pattern" may denote a characteristic signal pattern in the power consumption of a data processing device executing software (eg an application), a controller or any other electrical device. Due to varying usage of the processor, memory and / or other components of the data processing apparatus when executing an application, the power consumption of the device may vary in a characteristic manner.

[0044] The term "data processing device" may denote a computer system typically including a processor and memory attached to the processor, a dedicated device for running software, a controller, and I / O devices and the like. Software like operating systems, virtualization layers (eg, hypervisors), device drivers, and applications can be loaded and executed.

[0045] The term "time-stamped current value samples" may denote a continuous seque...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

A method and system for determining a power consumption pattern for at least one application being executed on a computer is provided. The method comprises measuring a DC current and measuring a DC supply voltage provided to a data processing device, thereby creating a stream of time-stamped voltage value samples and current value samples. The method comprises further determining a product of thestreams at identical times and converting the product into a real and an imaginary data stream using I / Q digital signal processing, combining these into a complex data stream, applying a signal processing demodulation step to the complex data stream, thereby generating a demodulated data stream, and extracting from the demodulated data stream at least one stream-based parameter signature, the at least one stream-based parameter signature representing the power consumption pattern of the at least one corresponding application being executed on the data processing device.

Description

Background technique [0001] The present invention relates generally to a method for software detection, and more particularly to a computer-implemented method for determining a power consumption mode of at least one application executing on a data processing device. The invention further relates to a system for determining a power consumption mode of at least one application executing on a data processing device, and a computer program product. [0002] A major challenge in the field of information technology (IT) security is to detect compromised systems when it is not possible to install malware detection software on the system. This applies to the field of operation technology (OT) when the system has network connectivity but is otherwise a closed box, applies to systems with unknown or outdated operating systems, and applies to systems with limited user interfaces. [0003] One way to detect system compromises is to analyze the power consumption of the system in question....

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F1/28G06F21/55
CPCG06F21/81G06F21/552G06F1/28H04M1/725G06F2221/034
Inventor I.里德曼T.谢德勒
Owner KYNDRYL INC