Gateway Object for Isolated Application Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional isolation layers prevent communication and sharing of objects between isolated and non-isolated applications, making it impossible for them to access or modify each other's resources, which limits the effectiveness of monitoring potentially malicious applications.
Innovation Solution
Creating a gateway computer object associated with a virtualized object, storing it outside the isolation layer, and enabling joint access by both the virtualized and actual applications, allowing modifications to the gateway object to reflect changes in the virtualized object without affecting the original object.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an isolation layer is used to execute potentially malicious applications, then the security of the operating system is improved, but the ability to share objects and communicate between isolated and non-isolated applications deteriorates
Solution Approach 1:
The patent introduces a gateway object as an intermediary between the isolated application and the non-isolated application. The gateway object is created in the isolation layer and provides controlled access to objects in the isolation layer from the outside. This mediator enables communication and object sharing while maintaining the security boundaries of the isolation layer, thus resolving the contradiction between security and adaptability.
2Reliability
If complete isolation is enforced to prevent malicious behavior, then the security against malware is improved, but the realism of application execution deteriorates
Solution Approach 1:
The gateway object serves as a controlled intermediary that allows the isolated application to interact with objects outside the isolation layer in a realistic manner. Instead of complete isolation, the gateway provides selective access points that maintain security while enabling realistic execution scenarios where applications need to access external resources.
Solution Approach 2:
The patent segments the isolation layer into distinct components: fully isolated objects and gateway objects that provide controlled access. This segmentation allows different parts of the isolation layer to have different levels of accessibility, enabling realistic execution for specific objects while maintaining overall security isolation.
3Reliability
If no access is allowed from isolated to non-isolated applications, then the security risk is reduced, but the functionality of monitoring and interaction deteriorates
Solution Approach 1:
The gateway object acts as a mediator that enables monitoring and interaction functionality while maintaining security. The gateway object allows non-isolated applications to access and monitor objects in the isolation layer without compromising security, thus resolving the contradiction between security risk reduction and monitoring effectiveness.
Data Source
AI summary
Providing joint access to an isolated computer object by both an isolated computer application and a non-isolated computer application. In one embodiment, a method may include executing a first computer application as a virtualized first computer application in an isolation layer, executing a second computer application as an actual second computer application in an operating system outside the isolation layer, creating a virtualized second computer object in the isolation layer in a location accessible to the virtualized first computer application, creating a gateway third computer object associated with the virtualized second computer object, storing the gateway third computer object outside the isolation layer in a location accessible to the operating system, and enabling joint access to the gateway third computer object by both the virtualized first computer application and the actual second computer application.