System Kernel Error Identification and Reporting via Event Listener
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
System kernel errors in computer programs are difficult to identify using dynamic and static scanning tools, as they often occur only in special circumstances during program execution, making real-time monitoring necessary to detect errors such as store violations, fetch violations, and privilege escalation.
Innovation Solution
A method for system kernel error identification and reporting that includes an event listener receiving error notifications from the operating system, an error analyzer determining system kernel errors based on diagnostic information, and a system kernel error reporter generating reports with relevant data, including time, error type, and storage attributes, to notify administrators.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dynamic and static scanning tools are used to detect system kernel errors, then the detection process is simple and does not require real-time monitoring, but system kernel errors occurring only in special circumstances during program execution cannot be effectively identified
Solution Approach 1:
The patent introduces an event listener as an intermediary component that sits between the operating system and the error analysis system. This event listener subscribes to operating system events and filters for program check events, transforming the complex real-time monitoring requirement into a manageable event-driven architecture. The intermediary handles the complexity of real-time monitoring while keeping the main error analysis system relatively simple.
Solution Approach 2:
The system performs preliminary action by setting up event listeners and error analyzers before program execution begins. The event listener is pre-configured to subscribe to operating system events, and the error analyzer is ready to analyze program check events as they occur. This preliminary setup enables automatic real-time detection without requiring complex on-the-fly monitoring configurations.
2Reliability
If real-time monitoring is implemented to detect system kernel errors during program execution, then errors occurring in special circumstances can be identified, but the system complexity and resource consumption increase
Solution Approach 1:
The patent extracts only the essential and relevant information from program check events for analysis. The error analyzer focuses specifically on determining whether a program check event constitutes a system kernel error, extracting only the necessary diagnostic information rather than monitoring and processing all program execution details. This selective extraction reduces resource consumption while maintaining effective error detection.
Solution Approach 2:
The operating system itself generates and provides program check events that contain diagnostic information about errors. The system leverages the operating system's built-in error detection and reporting mechanisms, with the event listener simply subscribing to these self-generated events. This self-service approach minimizes additional resource consumption by reusing existing operating system infrastructure rather than implementing duplicate monitoring mechanisms.
3Reliability
If comprehensive error reports with detailed diagnostic information are generated, then administrators can effectively mitigate flaws and prevent unauthorized access, but the time and resources required to process and analyze error data increase
Solution Approach 1:
The error analyzer performs preliminary action by immediately analyzing program check events as they occur and generating error reports in real-time. Rather than collecting and processing all error data at once, the system analyzes and reports errors as they happen, providing timely information to administrators. This preliminary analysis reduces the overall time required for error processing and response.
Solution Approach 2:
The error report generation process extracts and includes only the most relevant diagnostic information necessary for administrators to mitigate flaws and prevent unauthorized access. The report contains essential details such as error type, program information, and diagnostic data needed for security response, rather than including all possible system state information. This selective extraction reduces report processing time while maintaining effectiveness for security mitigation.
Data Source
AI summary
Techniques for system kernel error identification and reporting for a computer system are described herein. An aspect includes detecting an error during the execution of a program. Another aspect includes determining whether the error is a system kernel error in the program. Another aspect includes, based on determining that the error is a system kernel error, generating a report regarding the determined system kernel error.