Multipart File Transmission Regulation for Inline Cybersecurity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network cybersecurity components face challenges in efficiently managing multipart file transmissions due to varying protocols, leading to increased computational resource demands and delays in cybersecurity analysis, which impact user experience and complicate traffic handling.
Innovation Solution
A protocol-based multipart file transmission regulator separates tracking states of multipart file transmissions by session, determines message handling actions based on identified protocols, and maintains a data store for cybersecurity analysis, ensuring compliance with cybersecurity policies while minimizing resource usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a network cybersecurity component performs comprehensive cybersecurity analysis on multipart file transmissions, then security detection capability is improved, but computational resource requirements increase and processing delay increases
Solution Approach 1:
The patent segments the cybersecurity analysis process by protocol type, maintaining separate tracking states for different protocols (e.g., HTTP, FTP, SMB). This allows the system to apply appropriate analysis depth and resource allocation to each protocol, improving security detection while managing computational resources through selective intensive analysis based on protocol-specific risk profiles.
Solution Approach 2:
The system dynamically adjusts analysis parameters and resource allocation based on protocol identification. By changing the level of inspection depth, analysis methods, and resource allocation according to the detected protocol, the system optimizes the balance between comprehensive security analysis and computational resource consumption for each protocol type.
2Reliability
If a network cybersecurity component performs comprehensive cybersecurity analysis on multipart file transmissions, then security detection capability is improved, but processing time increases impacting user experience
Solution Approach 1:
By segmenting the analysis process into protocol-specific tracking states, the system can process different protocols in parallel with optimized analysis depths. This segmentation enables concurrent security inspection across multiple protocol types without sequential bottlenecks, reducing overall processing delay while maintaining comprehensive security coverage.
Solution Approach 2:
The system performs preliminary protocol identification and state initialization before comprehensive analysis begins. By pre-establishing protocol-specific tracking states and analysis parameters, the system reduces the time required to initiate full security inspection, thereby decreasing processing delay while maintaining detection capability.
3Adaptability or versatility
If a network cybersecurity component handles multiple multipart file transmission protocols, then protocol coverage is improved, but device complexity increases
Solution Approach 1:
The patent implements separate tracking states and processing logic for each protocol type, which simplifies the handling of each individual protocol while maintaining overall system versatility. This modular segmentation reduces the complexity of managing multiple protocols by isolating protocol-specific logic into distinct, manageable state machines.
Solution Approach 2:
The system employs a universal protocol identification and state management framework that can handle multiple protocols through a common architectural pattern. This universal approach reduces device complexity by reusing core processing mechanisms across different protocols while maintaining comprehensive protocol coverage through standardized interface designs.
4Reliability
If a network cybersecurity component collects and reassembles file chunks for analysis, then analysis comprehensiveness is improved, but processing overhead increases
Solution Approach 1:
The system segments file collection and reassembly operations by protocol, maintaining separate data structures and processing pipelines for each protocol type. This segmentation enables optimized chunk handling specific to each protocol's characteristics, improving analysis comprehensiveness while reducing unnecessary processing overhead from generic handling of all protocols uniformly.
Data Source
AI summary
Separating awareness of multipart file transmissions of different applications from traffic handling at a granularity of an individual application layer session facilitates efficient cybersecurity enforcement on multipart file transmissions. A protocol-based multipart file transmission regulator (“regulator”) determines a per session message handling action to prevent completion of a multipart file transmission based on a protocol of an application identified for the session until cybersecurity analysis can be performed. The regulator then communicates the message handling action to a network component supporting the session. The regulator maintains information and file chunks in a data store for active sessions and determines with the data store whether a condition for requesting cybersecurity analysis for a multipart file transmission is satisfied. Upon obtaining a cybersecurity analysis verdict, the regulator provides the verdict or a verdict based instruction to the network component that ensures the multipart file transmission is compliant with a cybersecurity policy(ies).