Freeze Algorithm for Software Build Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional software application build processes face issues with unauthorized changes being automatically incorporated into software application build sets by version control programs, leading to variations without proper authorization or security verification.

Innovation Solution

Implementing a freeze algorithm that modifies the incorporation of software artifacts within a software application build set to prevent unauthorized changes by version control programs, while monitoring SCM systems for changes and generating audit logs for security and compliance verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If version control programs automatically incorporate changes to software artifacts, then the build process is efficient and up-to-date, but unauthorized changes may be embedded into the build set

Engineering Contradiction:

Improvebuild process efficiencyVSAvoidauthorization control

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The system performs preliminary actions by establishing a freeze state before allowing changes. The freeze algorithm is executed in advance to prevent unauthorized modifications, and only after verification can changes be incorporated. This ensures that the build process maintains efficiency while preventing unauthorized changes through pre-established control mechanisms.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements feedback mechanisms through audit logs that track all changes to software artifacts. The monitoring component continuously checks for changes and provides feedback to the control component, which then determines whether to allow incorporation based on authorization criteria. This feedback loop maintains reliability while preserving build efficiency through automated verification.

Inventive Principle:

Principle #23Feedback

2Reliability

If changes are monitored and verified for security compliance, then unauthorized changes are prevented, but the build process complexity increases

Engineering Contradiction:

Improvesecurity verificationVSAvoidbuild process structure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system introduces intermediary components including a control component and monitoring component that mediate between the version control program and the build process. These intermediaries handle the complexity of security verification and compliance monitoring, allowing the main build process to remain relatively simple while adding necessary security layers through dedicated intermediary functions.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements self-service mechanisms where the freeze algorithm automatically prevents unauthorized changes, and the monitoring component automatically detects and reports changes without requiring manual intervention. This automation reduces the operational complexity of security verification while maintaining high reliability through continuous automated monitoring and control.

Inventive Principle:

Principle #25Self-service

3Reliability

If a freeze algorithm prevents changes to software artifacts, then authorization control is improved, but the adaptability of the build process decreases

Engineering Contradiction:

Improvechange controlVSAvoidchange incorporation flexibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system implements dynamics by making the freeze state configurable and changeable. The control component can dynamically adjust the freeze algorithm parameters, allow changes under specific conditions, and modify the monitoring thresholds. This dynamic capability maintains authorization control while preserving adaptability, as the system can transition between frozen and permissive states based on authorized criteria.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system utilizes parameter changes to balance control and adaptability. The freeze algorithm operates with configurable parameters that can be modified to allow or prevent changes based on authorization criteria. By changing these parameters dynamically, the system maintains reliable change control while adapting to different build requirements, enabling flexible incorporation of authorized changes without compromising security.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS11500980B2Automated and auditable framework to control software component changes in an application build process

Publication Date: 2022.11.15 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

Techniques regarding managing one or more software application build processes are provided. For example, one or more embodiments described herein can comprise a system, which can comprise a memory that can store computer executable components. The system can also comprise a processor, operably coupled to the memory, and that can execute the computer executable components stored in the memory. The computer executable components can comprise a control component that can execute a freeze algorithm that modifies an incorporation of a software artifact within a software application build set. The freeze algorithm can prevent implementation of a change to the software artifact by a version control program.