Hardware Malicious Code Detector in Data Processing Pipeline

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for detecting malicious code in computing devices often burden the processor, leading to reduced performance and increased energy consumption, as they either slow down other tasks or require expensive dedicated processors.

Innovation Solution

Implementing a processing pipeline with a hardware-based malicious code detector that operates in parallel with data processing, using hardware components like ASICs or FPGAs, allowing for simultaneous data alteration and malicious code detection without delaying data movement through the pipeline.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a processor is burdened with malicious code detection tasks, then detection capability is improved, but device performance and speed are reduced

Engineering Contradiction:
Improvemalicious code detection capabilityVSAvoiddevice performance
Core Design Contradiction:
ReliabilityVSSpeed

Solution Approach 1:

The patent segments the detection function by implementing a dedicated malicious code detector as a separate hardware component rather than burdening the main processor. This segmentation allows the detector to operate independently, improving detection capability without compromising overall device performance and speed.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a dedicated malicious code detector as an intermediary component between the data processing pipeline and the main processor. This intermediary handles the detection tasks separately, preventing detection operations from slowing down the main processing operations while maintaining effective malware detection.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If a dedicated processor is added for malicious code detection, then detection capability is improved, but device complexity and energy consumption increase

Engineering Contradiction:
Improvemalicious code detection capabilityVSAvoidprocessor configuration complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the malicious code detection function into the existing network device architecture by implementing the detector as integrated hardware components (ASICs or FPGAs) within the device. This merging approach improves detection capability while avoiding the complexity of adding separate dedicated processors, as the detector becomes part of the device's native hardware infrastructure.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If data scanning for malicious code is performed sequentially, then detection thoroughness is improved, but processing time and productivity are reduced

Engineering Contradiction:
Improvedetection thoroughnessVSAvoiddata processing throughput
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent transitions from sequential scanning to parallel detection by implementing the malicious code detector as a hardware component that operates simultaneously with data processing. This dimensional change from sequential to parallel operation maintains detection thoroughness while significantly improving data processing throughput and productivity.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Solution Approach 2:

The patent ensures continuous detection operation by implementing the malicious code detector as a hardware component that continuously scans data in real-time without interrupting the data processing pipeline. This continuous detection action maintains thoroughness while preventing productivity loss that would occur with sequential scanning interruptions.

Inventive Principle:
Principle #20Continuity of useful action

Data Source

PatentUS9032517B2Malicious code detection
Publication Date: 2015.05.12 HEWLETT PACKARD ENTERPRISE DEV LP
  • US9032517B2 patent drawing
  • US9032517B2 patent drawing
  • US9032517B2 patent drawing

AI summary

A device includes a pipeline and a detector that are both implemented at least in hardware. Data is moved through the pipeline to perform processing of the data unrelated to detection of malicious code. The detector detects the malicious code within the data as the data is moved through the pipeline, in parallel with the processing of the data as the data is moved through the pipeline. The detector detects the malicious code within the data as the data is moved through the pipeline without delaying movement of the data into, through, and out of the pipeline.