Continuous Application Risk Evaluation Without Stopping Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In complex software systems, especially those using open-source libraries, vulnerabilities such as bugs and security holes can be difficult to assess without stopping the application, particularly in large-scale systems where frequent application stops are not acceptable.
Innovation Solution
An evaluation apparatus and method that continuously assesses the risk of executing an application by obtaining application information, evaluating the risk degree based on this information, and outputting the evaluation results without requiring the application to be stopped.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If the application is stopped to evaluate vulnerability, then the evaluation accuracy is improved, but the system availability deteriorates
Solution Approach 1:
The patent collects application information (libraries, functions, configurations) and vulnerability information in advance before execution. By pre-processing and storing this data, the system can perform rapid risk evaluation during runtime without stopping the application, thus maintaining both evaluation accuracy and system availability
Solution Approach 2:
The patent introduces an evaluation apparatus as an intermediary component that separately processes application information and vulnerability information. This mediator analyzes the combination of these information sources to determine risk levels, enabling continuous monitoring without interrupting the target application's execution
2Reliability
If the application is continuously monitored to evaluate risk, then the system availability is maintained, but the evaluation complexity increases
Solution Approach 1:
The patent divides the evaluation system into distinct functional modules: an information acquisition unit that collects application data, a vulnerability database that stores security information, and an evaluation unit that performs risk analysis. This segmentation allows each component to operate independently and continuously without increasing overall system complexity
Solution Approach 2:
By pre-collecting and organizing application information (libraries, functions, configurations) and vulnerability data before runtime evaluation, the system reduces the computational burden during continuous monitoring. This preliminary processing enables real-time risk assessment without requiring complex real-time analysis mechanisms
3Measurement precision
If detailed application information is collected for accurate evaluation, then the evaluation precision is improved, but the information processing load increases
Solution Approach 1:
The patent collects and processes detailed application information (installed libraries, called functions, configuration files) in advance before the evaluation phase. By pre-processing this information and storing it in an organized manner, the system can quickly retrieve and analyze only relevant data during runtime, reducing processing time while maintaining evaluation precision
Solution Approach 2:
The patent extracts only the necessary application information (specific libraries, functions, and configurations) that are relevant to vulnerability assessment, rather than processing all possible application data. This selective extraction reduces information processing load while maintaining sufficient evaluation precision
Data Source
AI summary
In order to provide an evaluation apparatus that appropriately evaluates a risk from continuous execution of an application without stopping execution of the application, an evaluation apparatus includes a first obtaining section, an evaluating section, and an output section. The first obtaining section is configured to obtain application information related to an application being executed on a server. The evaluating section is configured to evaluate a risk degree from continuous execution of the application on the server, based on the application information. The output section is configured to output an evaluation result of the risk degree.