Load Regulator for Database Protocol Packet Analysis

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Database protocol packet analysis for security compliance is computationally intensive, leading to overutilization of computing resources and potential security breaches due to heavy resource consumption, especially when multiple security policies are applied iteratively or in parallel.

Innovation Solution

Implementing a load regulator application that partially pre-analyzes database protocol packets at the database server data processing system, using available processor capacity to offload computational work from the security data processing system, thereby reducing resource utilization and preventing security breaches.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If database protocol packets are fully analyzed for security compliance, then security auditing accuracy is improved, but computing resource utilization increases leading to overutilization and performance degradation

Engineering Contradiction:

Improvesecurity auditing accuracyVSAvoidcomputing resource utilization

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent applies partial action by analyzing only a subset of database protocol packets rather than all packets. The load regulator determines a second number of packets (less than the first number) to analyze based on available computing capacity, selecting these packets periodically from the shared memory. This partial analysis approach maintains security auditing functionality while preventing resource overutilization and performance degradation.

Inventive Principle:

Principle #16Partial or excessive action

2Reliability

If multiple security policies are applied iteratively or in parallel to database protocol packets, then security compliance coverage is improved, but computational complexity and resource consumption increase

Engineering Contradiction:

Improvesecurity compliance coverageVSAvoidcomputational complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies partial action by limiting the number of packets subjected to multiple security policy analyses. The load regulator controls the volume of packets analyzed by selecting only those within available computing capacity, thereby reducing the cumulative computational complexity of applying multiple security policies while still maintaining comprehensive security coverage across the packet subset.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The load regulator performs preliminary action by determining the second number of packets to analyze before the actual security policy analysis begins. This preliminary determination of analysis scope based on available computing resources allows the system to prepare and manage the computational load appropriately, preventing resource overload during the iterative or parallel application of multiple security policies.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If all database protocol packets in shared memory are analyzed, then security auditing completeness is improved, but database server performance deteriorates due to resource contention

Engineering Contradiction:

Improvesecurity auditing completenessVSAvoiddatabase server performance

Core Design Contradiction:

ReliabilityVSSpeed

Solution Approach 1:

The patent applies partial action by analyzing only a subset of packets from shared memory rather than all packets. The load regulator determines the second number of packets to analyze based on available computing capacity, selecting these packets periodically. This approach maintains security auditing completeness within the analyzed subset while preventing resource contention that would degrade database server performance.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The load regulator acts as an intermediary between the database server and the security analysis process. It monitors available computing capacity and controls the flow of packets for analysis, determining the second number of packets to analyze based on current system state. This intermediary role prevents direct resource contention between security auditing and database operations, maintaining overall system performance.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS10552611B2Resource usage optimized auditing of database shared memory

Publication Date: 2020.02.04 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

A method, system, and computer program product for security auditing of database transactions are provided in the illustrative embodiments. For a specified period, an available capacity of a computing resource in a data processing system usable to analyze a database protocol packet. The database protocol packet is stored in a shared memory during a data communication. A number of database protocol packets expected in the shared memory during the specified period is determined. Determining a second number of database protocol packets that can be analyzed using the available capacity of the computing resource is computed. During the specified period, the second number of database protocol packets is caused to be selected from every number of database protocol packets stored in the shared memory for analysis using the computing resource during the specified period.