Monitoring Resumption Logic After Security-Triggered System Restart
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing monitoring systems fail to maintain continuous monitoring of targets after system restarts initiated by other monitoring devices, leading to potential security vulnerabilities and loss of monitoring integrity.
Innovation Solution
A monitoring device that includes an obtainer to receive monitoring requests from targets after system restarts and a determiner to assess whether to resume monitoring based on process counts and memory integrity, ensuring secure resumption of monitoring.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the other monitoring device causes restarting of the system based on monitoring results, then system security is improved, but the monitoring target is excluded from continuous monitoring
Solution Approach 1:
The monitoring device preserves monitoring data and monitoring target identification information before system restart occurs. This preliminary action ensures that when the system restarts, the monitoring can be resumed without loss of continuity, as the necessary information was saved in advance during the normal operation phase.
Solution Approach 2:
The monitoring device receives feedback in the form of monitoring requests from monitoring targets after system restart. By processing these requests and determining whether to resume monitoring based on pre-preserved information, the system establishes a feedback loop that restores monitoring continuity while maintaining the security benefits of the restart.
2Reliability
If the monitoring device resumes monitoring after system restart, then monitoring integrity is improved, but system complexity increases
Solution Approach 1:
The monitoring device performs preliminary actions by saving monitoring target identification information and monitoring data before system restart. This pre-prepared information simplifies the post-restart process, as the device can directly compare incoming monitoring requests against the preserved information to determine whether to resume monitoring, rather than implementing complex verification logic from scratch.
Solution Approach 2:
The monitoring target itself initiates the resumption process by sending a monitoring request after system restart. The monitoring device uses this self-service approach where the target automatically seeks to re-establish monitoring connection, reducing the need for complex active probing or verification mechanisms by the monitoring device.
Data Source
AI summary
A monitoring device is a monitoring device that monitors a monitoring target that exists in a normal world. The monitoring target is also monitored by an other monitoring device different from the monitoring device. The monitoring device includes: an obtainer that obtains, when the other monitoring device causes restarting of a system based on a result of monitoring the monitoring target, a monitoring request from the monitoring target after the restarting, the system including the monitoring target and the monitoring device; and a determiner that, in response to receiving the monitoring request, determines whether to resume the monitoring of the monitoring target.