Installation Control Device for Software Authenticity and Vulnerability Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software installation techniques fail to adequately reduce the risk of vulnerabilities and backdoors, even in untampered software, as they primarily rely on hash value comparisons which do not account for potential vulnerabilities.
Innovation Solution
An installation control device and method that receives verification certification data indicating the safety and authenticity of target software, compares this data with pre-existing authenticity information, and controls the installation process based on matching authenticity information to ensure the software has not been tampered with or contains vulnerabilities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hash value comparison is used to verify software authenticity, then the risk of tampering is reduced, but the risk of vulnerabilities and backdoors remains
Solution Approach 1:
The verification process is divided into separate stages: first verifying authenticity through hash value comparison, then verifying safety through vulnerability scanning. This segmentation allows the system to address both tampering detection and vulnerability detection independently, resolving the contradiction between authenticity verification and vulnerability risk reduction.
Solution Approach 2:
The system performs vulnerability scanning as a preliminary action before installation. By conducting safety verification in advance through automated vulnerability detection, the system proactively identifies potential backdoors and vulnerabilities before they can be exploited, thereby reducing the harmful factors while maintaining authenticity verification.
2Reliability
If automated installation control is implemented, then installation security is improved, but device complexity increases
Solution Approach 1:
The installation control device automatically performs both authenticity verification and vulnerability scanning without requiring manual intervention. The system self-manages the verification process, comparing hash values and scanning for vulnerabilities autonomously, which improves installation security while the automation reduces operational complexity despite the sophisticated verification mechanisms.
Data Source
AI summary
An installation control device according to an aspect of the present disclosure includes: at least one memory storing a set of instructions; and at least one processor configured to execute the set of instructions to: receive verification certification data including first authenticity information of target software and indicating that safety of the target software has been verified; compare the first authenticity information included in the verification certification data with second authenticity information of the target software; and perform control in such a way that the target software is installed when the first authenticity information is same as the second authenticity information.