Dual Processor Memory Isolation for Malware Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer systems are vulnerable to malicious software (malware) due to shared memory spaces and resource access, allowing malware to corrupt critical files and evade security measures, leading to data theft and system degradation.
Innovation Solution
A computer system architecture that isolates the network interface program from the main memory space, using a second processor to confine malware infections to a separate memory area, preventing access to critical files and allowing easy removal and restoration of corrupted files.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a shared memory space architecture is used to allow network interface programs to access system resources, then system functionality and ease of operation are improved, but security against malware is worsened
Solution Approach 1:
The system divides the memory space into multiple isolated segments: a first memory space for the operating system and critical system files, and a second memory space for the network interface program. This segmentation prevents malware executed in the second memory space from accessing or corrupting critical files in the first memory space, while still allowing the network program to function independently.
2Adaptability or versatility
If malware is allowed to execute in the main memory space, then program execution flexibility is improved, but system reliability is worsened due to potential file corruption
Solution Approach 1:
The network interface program, which is the potential vector for malware execution, is extracted from the main memory space and placed in a separate second memory space. This extraction allows the program to execute with necessary flexibility while isolating it from critical system files, ensuring that even if malware executes, it cannot corrupt the operating system or user data in the first memory space.
3Object-affected harmful factors
If security measures are strengthened to prevent malware access, then system security is improved, but ease of operation is worsened due to restricted resource access
Solution Approach 1:
The patent introduces a memory space intermediary architecture where the first and second memory spaces are isolated but can be connected through controlled interfaces. This intermediary structure provides automatic security protection while maintaining ease of operation, as legitimate resource access requests can be handled through defined protocols without requiring complex security checks for each operation.
Data Source
AI summary
In a computer system, a first electronic data processor is communicatively coupled to a first memory space and a second memory space. A second electronic data processor is communicatively coupled the second memory space and to a network interface device. The second electronic data processor is capable of exchanging data across a network of one or more computers via the network interface device. A video processor is adapted to combine video data from the first and second electronic data processors and transmit the combined video data to a display terminal for displaying the combined video data in a windowed format. The computer system is configured such that a malware program downloaded from the network and executing on the second electronic data processor is incapable of initiating access to the first memory space.