App Signature Verification for Distributed System Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed computing systems, monitoring computer program security across networked devices is challenging due to the complexity of tracking various applications, leading to limited effectiveness of traditional methods like log file monitoring and network activity behavior analysis.
Innovation Solution
A computer-implemented method is introduced where a security program in a computer node monitors security by receiving and comparing app signatures from devices to a reference signature generated from a functional replica of the application, triggering an alarm if a mismatch is detected, and is integrated with design software to enhance security monitoring in distributed systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional methods like log file monitoring and network activity behavior analysis are used, then security monitoring can be implemented, but the effectiveness is limited due to the complexity of tracking various applications across networked devices
Solution Approach 1:
The patent creates a functional replica of the application code and generates a reference app signature from it. This copy is used to establish a baseline for security comparison, allowing the system to detect tampering without needing to continuously analyze complex runtime behaviors across distributed devices.
Solution Approach 2:
The patent extracts the essential security verification function from complex runtime monitoring by isolating the app signature comparison mechanism. Instead of monitoring all application behaviors, it extracts and compares only the critical signature element, simplifying the tracking process while maintaining security effectiveness.
2Measurement precision
If app signatures are compared to reference signatures from functional replicas, then potential security breaches can be detected, but additional processing steps are required to generate and maintain reference signatures
Solution Approach 1:
The patent performs preliminary action by generating the reference app signature from the functional replica in advance, before actual security monitoring begins. This pre-computed reference is stored and used for subsequent comparisons, eliminating the need to regenerate it repeatedly and reducing real-time processing complexity.
Solution Approach 2:
The functional replica serves as a copy of the original application code, from which the reference signature is derived. This copying approach allows the system to work with a simplified representation rather than the full application, reducing processing requirements while maintaining detection accuracy.
Data Source
AI summary
A computer-implemented method of monitoring security of a set of computing devices in a distributed system, the distributed system having a plurality of computing devices, in communication with one another over a network, by a security software running in a computer node. The method includes comparing an app signature of the application running in a selected one of the set of computing devices to a reference app signatures generated from a respective functional replica of the application.