Core Dump Redaction via Modifiable Parameter Identification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Customers are reluctant to provide core dumps containing sensitive information to software developers for debugging and performance improvement, as they fear exposure of confidential data such as social security numbers, IP addresses, and credit card numbers.
Innovation Solution
A system that identifies modifiable parameters associated with obfuscation categories in source code during compilation, uses format-preserving encryption (FPE) to redact sensitive information from core dumps, preserving the format and secrecy of the data, allowing developers to analyze the redacted dumps for debugging purposes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If customers provide core dumps to developers for debugging, then debugging effectiveness is improved, but sensitive information security deteriorates
Solution Approach 1:
The patent extracts and removes sensitive information from core dumps before providing them to developers. The system identifies sensitive data patterns (credit card numbers, social security numbers, IP addresses, etc.) and extracts them from the core dump files, replacing them with redacted versions that maintain data structure but hide actual values, thus enabling debugging while protecting sensitive information
Solution Approach 2:
The patent introduces an intermediary processing system between the core dump source and the developer. This intermediary automatically redacts sensitive information while preserving debugging-relevant data, allowing developers to receive processed core dumps that maintain diagnostic value without exposing sensitive customer information
2Object-affected harmful factors
If sensitive information is redacted from core dumps, then information security is improved, but debugging information completeness deteriorates
Solution Approach 1:
The patent applies different quality treatments to different parts of the core dump data. Sensitive information fields are redacted to hide actual values, while non-sensitive debugging-relevant fields retain their original content and detail, creating a locally differentiated quality approach that protects sensitive areas while preserving diagnostic areas
Solution Approach 2:
The patent changes parameters of sensitive data by replacing actual values with redacted placeholders that maintain the same data format, length, and structure. This allows the core dump to maintain its overall integrity and debugging utility while specific sensitive parameters are transformed to protect confidentiality
3Object-affected harmful factors
If format-preserving encryption is used to redact sensitive information, then data secrecy is improved, but data format compatibility deteriorates
Solution Approach 1:
The patent applies format-preserving encryption that transforms sensitive data parameters while maintaining the original data format, length, and structure. The encryption process changes the actual values but preserves the syntactic form, ensuring that encrypted data remains compatible with expected data formats and can be processed by debugging tools without format-related issues
Data Source
AI summary
A technique includes identifying a statement of a program based on a category that is associated with a sensitive-information category. The technique includes, based on a variable that is contained in the program statement, identifying at least one modifiable parameter (MP) of the program; and obfuscating a portion of a memory image associated with the program based on the identified MP.