DVA Tool Cyber Hardening Source Code Transformation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network firewalls and Intrusion Detection Systems (IDS) are inadequate in preventing cyberattacks before they occur, as they primarily focus on detection and reporting rather than proactive defense, leaving systems vulnerable to exploitation.
Innovation Solution
The Difference Validation and Auditing (DVA) tool performs cyber hardening by transforming source code, specifically through binary and source transformations, to enhance security by validating and auditing changes made to applications, ensuring they remain inert to unintended program behavior and maintaining intended functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If source code transformation is performed for cyber hardening, then system security is improved, but system behavior validity becomes difficult to verify
Solution Approach 1:
The patent creates a copy of the original source code and performs transformation on the copy while keeping the original unchanged. This allows verification that the transformed code produces the same output as the original, ensuring behavior validity is maintained while security is improved through hardening transformations.
Solution Approach 2:
The patent implements a feedback mechanism where the transformed code is executed and its output is compared against the original code's output. This feedback loop verifies that the transformation maintained behavioral equivalence, allowing validation that security hardening did not introduce unintended behavior changes.
2Object-affected harmful factors
If binary transformation is applied to harden software, then security against cyber threats is enhanced, but verification of transformation validity becomes complex
Solution Approach 1:
The patent replaces complex manual validation processes with automated computational verification. The system automatically executes both original and transformed code, compares outputs, and validates transformation correctness, substituting manual analytical processes with automated mechanical verification that reduces complexity.
3Reliability
If code transformation is performed to improve security, then protection against exploitation is strengthened, but ensuring consistent outputs becomes challenging
Solution Approach 1:
The patent performs preliminary action by establishing a baseline of the original code's behavior before transformation occurs. This baseline is stored and used for later comparison to ensure that the transformed code maintains output consistency, allowing security improvements while preserving functional stability.
Data Source
AI summary
Systems and methods of cyber hardening software by modifying one or more assembly source files. In some embodiments, the disclosed SME tool transparently and seamlessly integrates into the build process of the assembly source files being modified. For example, upon integration of the disclosed SME tool into the application's development environment, the modifications in the final executable are transparent to the developer and can support other cyber hardening techniques. The SME tool includes a preprocessing tool for identifying attributes (e.g., functions) associated with the assembly source file. The SME tool also includes a transformation tool for making modifications of the assembly source file. In some embodiments, the transformations correspond to applying one or more transformations to the attributes associated with the assembly source file.