Mock Execution Environment for Secure Cross-Platform Development

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In the Open Source software community, collaborative computing systems face security risks due to developers having high privileges, allowing them to potentially attack the systems and introduce malicious code, and secure operating systems like SELinux are inflexible for cross-platform development.

Innovation Solution

A mock execution environment is created using a mock tool that isolates software development processes, simulating the disabling of incompatible operating system features to prevent malicious code exposure and enable cross-platform development while maintaining security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If developers are given high privileges to build software packages on collaborative computing systems, then software development capability is improved, but system security deteriorates as developers can potentially attack the systems and introduce malicious code

Engineering Contradiction:
Improvesoftware development capabilityVSAvoidsystem security
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system divides the collaborative computing system into isolated build environments (chroot jails) for each developer. Each developer receives high privileges within their own isolated environment but cannot access or attack the underlying system or other developers' environments. This segmentation resolves the contradiction by providing full development capability within isolated segments while protecting the overall system security.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary build system that mediates between developers and the collaborative computing system. The build system acts as a controlled interface that grants developers the necessary privileges to build software packages while enforcing security constraints and preventing direct access to system resources. This intermediary layer enables development capability while maintaining system security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If secure operating systems like SELinux are enabled to improve system security, then security is improved, but cross-platform development capability deteriorates due to lack of flexibility

Engineering Contradiction:
Improvesystem securityVSAvoidcross-platform development capability
Core Design Contradiction:
Object-affected harmful factorsVSAdaptability or versatility

Solution Approach 1:

The system creates separate isolated build environments where different operating system configurations can coexist. Each environment can be configured with appropriate security policies for its specific platform requirements, allowing cross-platform development while maintaining security through isolation. This segmentation enables both security and cross-platform capability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies different security policies and operating system configurations to different local environments based on the specific development needs. Each build environment can have customized security settings and OS features tailored to its platform requirements, rather than applying a single uniform security policy across all platforms. This local quality approach maintains security while enabling cross-platform development flexibility.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS8745714B2Secure software development environments
Publication Date: 2014.06.03 RED HAT INC
  • US8745714B2 patent drawing
  • US8745714B2 patent drawing
  • US8745714B2 patent drawing

AI summary

The mock tool can be configured to create a mock execution environment for supporting software development processes. The mock execution environment is isolated from resources of the computing system supporting the mock execution environment and other mock execution environments. Further, the mock execution environment can be created to simulate disabling on any features of the operating system supporting the mock execution environment that could cause problems in the software development process.