Kernel Security Module Partitioning for Independent Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security modules installed at the kernel level of computer devices are difficult to update quickly and easily, making them vulnerable to malicious attacks due to the need for modifying the operating system kernel, which is inflexible in today's rapidly changing cybersecurity environment.
Innovation Solution
The security module is divided into a non-updatable and updatable part, with the non-updatable part directly interfacing with the OS kernel and the updatable part indirectly interfacing through the non-updatable part, allowing updates to be made independently of the OS kernel without recompiling it, and incorporating two-factor verification for update requests.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the security module is installed at the kernel level to interface directly with the OS kernel, then security monitoring capability is improved, but update flexibility deteriorates
Solution Approach 1:
The security module is divided into two distinct parts: a non-updatable part that directly interfaces with the OS kernel to maintain stable security monitoring, and an updatable part that can be independently updated without modifying the kernel. This segmentation allows the system to maintain both direct kernel access for reliability and independent update capability for flexibility.
2Reliability
If the security module is updated by modifying the OS kernel, then security function is improved, but system complexity increases
Solution Approach 1:
The updatable security functions are extracted from the OS kernel and placed in a separate updatable part of the security module. This extraction allows security functions to be updated independently without requiring kernel modification or recompilation, thereby reducing system complexity while maintaining security functionality.
3Reliability
If the security module is updated by recompiling the OS kernel, then security patch is applied, but time consumption increases
Solution Approach 1:
The security module is pre-configured with an updatable part that is designed to be independently replaceable. This preliminary structural preparation enables rapid security updates by simply replacing the updatable part without requiring time-consuming kernel recompilation processes.
4Productivity
If the security module is made updatable independently, then update speed is improved, but system stability may deteriorate
Solution Approach 1:
Different parts of the security module have different qualities: the non-updatable part maintains system stability by preserving the original kernel interface, while the updatable part enables rapid updates for specific security functions. This local differentiation of qualities allows both stability and update speed to coexist.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Provided are a computer device including a separated security module, and a method for updating the security module. The computer device may include an OS kernel and a separated security module. The OS kernel is installed at a kernel level to operate, and has a security callback function. The separated security module is installed at the kernel level to operate, and is divided into a non-updatable part and an updatable part. Furthermore, the separated security module includes: the non-updatable part configured to directly interface with the OS kernel and to be connected to the security callback function; the updatable part configured to indirectly interface with the OS kernel through the non-updatable part; and an update manager configured to control update on the updatable part.