Control Circuit for Securing Storage Against Malware Modification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer systems are vulnerable to malware attacks that can modify and compromise stored files, as existing security measures are inadequate in preventing unauthorized changes to operating systems and executable software.
Innovation Solution
A control circuit is placed between the computer processor and data storage areas to operate in modes that allow communication to one storage area while blocking modifications to another, ensuring that only authorized commands reach the protected storage area, thereby securing files from unintended modifications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a control circuit is placed between the processor and data storage areas to block modification commands, then file integrity and security are improved, but device complexity increases
Solution Approach 1:
A control circuit is positioned as an intermediary component between the processor and the second data storage area. This control circuit intercepts commands from the processor and selectively blocks modification commands while allowing read commands to pass through, thereby protecting files on the second storage area from unauthorized modification without requiring changes to the processor or storage devices themselves.
2Reliability
If the control circuit blocks all modification commands to the second data storage area, then security against malware is improved, but ease of operation deteriorates
Solution Approach 1:
The control circuit is designed to dynamically adjust its command filtering behavior based on the type of command received. It automatically distinguishes between read commands (which are allowed to pass through to enable file access and verification) and modification commands (which are blocked to prevent unauthorized changes). This dynamic response allows the system to maintain both security and operational functionality without requiring manual configuration or user intervention.
Data Source
AI summary
A computer system for securing computer files from modification may include a processor; a first data storage area operatively coupled to the processor; a non-volatile second data storage area; and a control circuit. The second data storage area may be physically separate from the first data storage area. The second data storage area may store files that are executable by the processor, including executable files of an operating system configured to save temporary files on the at least a first data storage area. The control circuit may operatively couple the second data storage area to the processor, and may be operable in a first mode configured to block commands received from the processor and configured to modify the second data storage area from being communicated to the second data storage area. In a second mode, all commands may be allowed to the first and second data storage areas.