BMC D-Bus Code Integrity Scanning via Symbol Table Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing Information Handling Systems (IHSs) lack effective mechanisms to detect and prevent illicit changes to open source code files, particularly those implementing D-Bus interfaces, which can compromise system integrity and security.
Innovation Solution
A system and method that scans executable images for mismatches between build time symbol tables and reference symbol tables, with the capability to perform remedial actions when discrepancies are found, specifically designed to be installed on Baseboard Management Controllers (BMCs) and integrated with open source code files that include D-Bus interfaces.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If open source code files are used in BMC executable images, then system functionality and adaptability are improved, but system integrity and security are compromised due to undetected illicit changes
Solution Approach 1:
The patent applies preliminary action by generating a reference symbol table during the build process and embedding it within the executable image before deployment. This reference symbol table serves as a pre-established baseline that enables future detection of any illicit changes to open source code files, allowing the system to maintain both adaptability from open source usage and reliability through pre-configured verification capabilities
Solution Approach 2:
The patent implements feedback by creating a verification mechanism that compares current symbol tables against the embedded reference symbol table at runtime or during updates. This feedback loop detects deviations from the original build, alerting administrators to potential security breaches or corruption while maintaining the benefits of open source code integration
2Difficulty of detecting and measuring
If traditional code verification methods are used, then detection capability is limited, but system complexity and resource consumption increase
Solution Approach 1:
The patent applies copying by creating a symbol table that mirrors the essential identifying characteristics of the open source code files. Instead of implementing complex verification systems, the patent copies the build-time symbol information into a reference table that can be efficiently compared against current state, providing strong detection capability with minimal added complexity
Solution Approach 2:
The patent introduces an intermediary mechanism - the symbol table comparison system - that mediates between the executable image and the verification process. This intermediary layer enables detection of code changes without requiring direct analysis of the entire codebase, reducing computational overhead and system complexity while maintaining high detection capability
Data Source
AI summary
Embodiments of the present disclosure provide a system and method to scan open source code files to alleviate illicit changes to those files. According to one embodiment, an Information Handling System (IHS) includes executable instructions to obtain an executable image having a build time symbol table that was generated when the executable image was built, compare a reference symbol table with the build time symbol table from the software image, and when the build time symbol table and the reference symbol table do not match, perform at least one remedial action. The executable image is configured to be installed on the BMC and includes at least one open source file that when built, comprises a D-Bus interface.