Dynamic Privilege Modification for Process Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multi-user operating systems, processes owned by highly privileged users are vulnerable to malicious exploitation, as they are omnipotent and can execute core functions, making the system susceptible to attacks that exploit these privileges.
Innovation Solution
A system and method that allows for the modification of privileges assigned to a process after its creation, enabling the reduction or expansion of its abilities through a request, using a process manager and system interface to dynamically manage privileges, thereby mitigating the risk of malicious exploitation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If processes are assigned high privileges to enable core function execution, then the system can perform essential operations, but the system becomes vulnerable to malicious exploitation
Solution Approach 1:
The patent implements dynamic privilege management by allowing the operating system to modify the set of abilities assigned to a process during its execution. The process manager receives requests to add or remove abilities from running processes, enabling the system to adapt privilege levels based on operational needs rather than maintaining static high privileges throughout the process lifecycle.
Solution Approach 2:
The system changes the parameter of privilege levels by modifying the set of abilities assigned to a process. The process manager can add or remove specific abilities from a process's privilege set dynamically, transforming the process from having fixed high privileges to having adjustable, context-appropriate privileges that change over time.
2Object-affected harmful factors
If privileges are restricted to reduce security risk, then malicious exploitation is mitigated, but the process cannot execute core functions
Solution Approach 1:
The system dynamically adjusts privilege levels by allowing ability sets to be modified during process execution. When core functions need to be executed, the process manager can temporarily grant the necessary abilities, and when they are no longer needed, the abilities can be removed, thus maintaining both security and functionality at different times.
Solution Approach 2:
The system performs preliminary privilege assignment when a process is created, giving it a baseline set of abilities. Additional privileges can then be granted on-demand when specific core functions need to be executed, and removed afterward, ensuring that high privileges are only present when absolutely necessary.
3Device complexity
If static privileges are assigned at process creation, then the system is simple to manage, but the system cannot adapt to changing security requirements
Solution Approach 1:
The patent transforms static privilege management into a dynamic system where the process manager can receive and process requests to modify a running process's ability set. This allows the system to respond to changing security requirements and operational needs without requiring complete process restarts or complex reconfiguration.
Solution Approach 2:
The system enables self-service privilege modification where processes or authorized entities can request changes to their own or other processes' ability sets through the process manager interface, reducing the need for manual administrative intervention while maintaining security controls.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A system and method wherein a set of privileges assigned to a process (110) may be modified responsive to a request (114). The modification may apply to one or more abilities within the set of privileges and may be applied during execution of the process subsequent to the process creation time. Accordingly a process may be created with a default set of privileges (302) and subsequently the privileges may be modified (e.g. to include a sub-set of the default privileges) thereby mitigating the risk of malicious exploitation of the process through attack.