Dual Random Number Generation for Process Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing method of using a single random number for both parent and child processes in a host system makes the system susceptible to security attacks, as the same random value is used across all processes, depleting system entropy and potentially compromising security when malicious behavior is detected.
Innovation Solution
Implementing a dual random number generation mechanism, where a pseudorandom number generator is used for normal behavior and a system entropy-based generator is used when malicious behavior is detected, ensuring enhanced security and efficient entropy usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single random number is used for both parent and child processes, then the system entropy is depleted faster, but the security of the system is compromised
Solution Approach 1:
The patent segments the random number generation by creating separate random values for parent and child processes. Instead of using a single random number across all processes, the system generates distinct random values for each process type, thereby preventing entropy depletion while maintaining security. This segmentation isolates the entropy consumption to specific process contexts.
Solution Approach 2:
The patent applies local quality by using different random value generation strategies for different process contexts. Parent processes use one random value while child processes use another, tailoring the entropy usage to the specific needs and security requirements of each process type rather than applying a uniform approach system-wide.
2Productivity
If a pseudorandom number generator is used for normal behavior, then the system efficiency is improved, but the security is reduced when malicious behavior is detected
Solution Approach 1:
The patent implements dynamic random value generation where the system transitions between pseudorandom and entropy-based generation modes based on detected behavior. For normal operations, efficient pseudorandom generation is used, but upon detecting malicious behavior, the system dynamically switches to security-focused entropy-based generation, adapting to changing conditions.
Solution Approach 2:
The patent changes the parameters of random value generation based on system state. The randomness quality, entropy usage, and generation method are adjusted according to whether normal or malicious behavior is detected, allowing the system to optimize between efficiency and security based on operational context.
3Reliability
If system entropy values are used to generate random numbers, then the security is enhanced, but the execution of subsequent child processes is delayed
Solution Approach 1:
The patent applies partial action by using system entropy values selectively rather than for every random number generation. Entropy-based generation is used only when enhanced security is required (e.g., when malicious behavior is detected), while pseudorandom generation handles routine operations, thus avoiding unnecessary delays in normal process execution.
Data Source
AI summary
Processes being executed by a host system and associated with a first address space layout may be identified. An indication of abnormal behavior from at least one of the processes that are being executed by the host system may be received. A request for a new process to be executed by the host system may be received. In response to the indication of the abnormal behavior and the request to provide the new process, a second address space layout may be generated for the new process that is different than the first address space layout. The new process may be generated in view of the second address space layout.