Disposable Virtual Machine Isolation for Host Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current information security tools and computing practices are inadequate in preventing Internet-enabled compromises of computer system security, as they rely on perfect software and filtering mechanisms, which can lead to vulnerabilities when Internet-connected applications are run, potentially compromising the entire system with a single vulnerability.
Innovation Solution
The system employs on-demand disposable virtual machines, where each Internet-enabled or untrusted application runs in a pristine guest operating system that is temporally isolated from the host machine, eliminating the need for perfect software and reducing the risk of compromise by destroying the virtual machine at the end of each session, thereby containing any attacks within the guest OS.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If Internet-enabled applications are run on the host system, then functionality and productivity are improved, but security vulnerability increases
Solution Approach 1:
The system divides the computing environment by running Internet-enabled applications in separate virtual machines rather than on the host system. Each application gets its own isolated virtual machine instance, segmenting the system so that vulnerabilities in one application cannot affect the host or other applications. This resolves the contradiction by maintaining full application functionality while eliminating security vulnerabilities through spatial and logical separation.
2Reliability
If traditional security tools and filtering mechanisms are used, then security protection is improved, but system complexity and maintenance burden increase
Solution Approach 1:
The invention extracts the security function from complex traditional security tools and filtering mechanisms, replacing them with virtual machine isolation. Instead of adding multiple layers of security software, firewalls, and filters, the system simply runs applications in isolated virtual machines, thereby achieving strong security protection while dramatically reducing system complexity and maintenance burden.
3Reliability
If software patching is performed daily to maintain security, then security reliability is improved, but time consumption and operational overhead increase
Solution Approach 1:
The system creates disposable virtual machine instances for each Internet-enabled application. These virtual machines are inexpensive to create and can be quickly destroyed after use. Instead of maintaining security through time-consuming daily patching, the system simply discards the virtual machine after the application session ends, eliminating the need for ongoing security maintenance while maintaining high security reliability.
4Reliability
If virtual machines are created for each application session, then security isolation is improved, but system resource consumption increases
Solution Approach 1:
The system creates virtual machine instances for each application session, uses them for their intended purpose, then destroys them to recover resources. This discard-and-recreate approach maintains strong security isolation for each session while managing resource consumption efficiently, as the virtual machines are short-lived and resources are promptly recovered after each use.
Data Source
AI summary
An on-demand disposable virtual work system that includes: a virtual machine monitor to host virtual machines, a virtual machine pool manager, a host operating system, a host program permissions list, and a request handler module. The virtual machine pool manager manages virtual machine resources. The host operating system interfaces with a user and virtual machines created with an image of a reference operating system. The host program permissions list may be a black list and/or a white list used to indicate allowable programs. The request handler module allows execution of the program if the program is allowable. If the program is not allowable, the host request handler module: denies program execution and urges a virtual machine specified by the virtual machine pool manager to execute the program. The virtual machine is terminated when the program closes.