Inter-Process Communication Watchdog for Security Vulnerability Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Inter-process communication channels in computer operating systems, such as iOS and Android, expose users to security risks like broadcast theft, activity hijacking, and unauthorized data transmission due to improper authentication and unsafe Intent mechanisms.

Innovation Solution

A method is implemented on computing devices to detect inter-process communications, determine if they align with predefined security vulnerability specifications, and perform predefined actions, such as notifications or quarantining, to address these risks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If inter-process communication channels are provided to enable data transmission between processes, then communication functionality and data sharing capability are improved, but security risks such as broadcast theft, activity hijacking, and unauthorized data transmission increase

Engineering Contradiction:

Improvecommunication functionalityVSAvoidsecurity risks

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

A watchdog application is introduced as an intermediary component that monitors and analyzes inter-process communication channels. The watchdog detects security vulnerabilities by observing communication patterns and comparing them against predefined security specifications, thereby enabling security protection without fundamentally altering the communication mechanism itself

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

Security specifications for detecting vulnerabilities are predefined and prepared in advance. The system proactively establishes detection rules and criteria before security incidents occur, allowing for rapid identification and response to security threats when they manifest in the inter-process communication channels

Inventive Principle:

Principle #10Preliminary action

2Reliability

If authentication mechanisms are strengthened to prevent unauthorized access, then security is improved, but communication efficiency and ease of operation deteriorate

Engineering Contradiction:

Improveauthentication securityVSAvoidcommunication efficiency

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The watchdog application autonomously monitors and detects security vulnerabilities without requiring manual intervention or additional authentication steps from users. The system self-manages the security detection process, analyzing communication patterns and identifying threats independently, thereby maintaining communication efficiency while enhancing security

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS10528744B2Detecting security vulnerabilities on computing devices

Publication Date: 2020.01.07 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

Identifying security vulnerabilities on computing devices by detecting an inter-process communication on a computing device, determining whether the inter-process communication is consistent with a predefined specification of a security vulnerability, and causing a predefined action to be performed on the computing device responsive to determining that the inter-process communication is consistent with a predefined specification of a security vulnerability.