Emulator Filter for Server Security via Platform Fingerprinting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Server computers face challenges in distinguishing between legitimate requests from platform-specific applications executed on target platforms and malicious requests from emulators, leading to potential unauthorized access and attacks.
Innovation Solution
Implementing an emulator filter that determines whether requests are from a platform-specific application executed on a target computer platform or an emulator on a non-target platform by using fingerprinting instructions and conditional code to generate fingerprint values, and applying policies based on match criteria and actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the server computer accepts requests from any client platform, then accessibility and ease of operation are improved, but security and reliability deteriorate due to emulator-based attacks
Solution Approach 1:
An intermediary computer is introduced between the client computer and server computer. This intermediary receives requests from the client, determines whether the request originates from an emulator or legitimate platform-specific application, and selectively forwards or blocks requests based on this determination. This mediator resolves the contradiction by enabling broad accessibility while filtering out malicious emulator-based requests before they reach the server.
2Reliability
If the server computer implements strict platform verification, then security is improved, but device compatibility and adaptability worsen
Solution Approach 1:
The verification process is customized based on the specific request and client characteristics. The intermediary computer analyzes individual requests to determine if they originate from legitimate platform-specific applications or emulators, applying different levels of verification scrutiny to different clients. This localized approach maintains security for legitimate devices while avoiding unnecessary restrictions on compatible devices.
3Reliability
If the server computer blocks all emulator requests, then security against attacks is improved, but legitimate testing and development capabilities worsen
Solution Approach 1:
The intermediary computer performs preliminary analysis of incoming requests to identify and block malicious emulator-based attacks before they can harm the server. By proactively detecting emulator requests and applying appropriate actions (blocking or forwarding) based on the determination, the system prevents attacks while preserving legitimate testing and development activities that may originate from authorized sources.
Data Source
AI summary
In an embodiment, a computer system is configured to receive, from a client computer, a request with one or more values; determine, based on the one or more values, whether the request is from a platform-specific application compiled for a first computer platform; determine, based on the one or more values, whether the platform-specific application is being executed within an emulator being executed by a second computer platform, wherein the second computer platform is different than the first computer platform.