NVM Object Property Classification for Secure System Restart
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems fail to effectively manage and execute process images stored in non-volatile memory (NVM) during system restarts, as they do not consider volatility and execute-ability, leading to security risks and inefficiencies in process resumption and execution.
Innovation Solution
A device with a property unit and an action unit determines the properties of NVM objects, such as volatility and executable information, to decide actions like destroying, maintaining, or executing NVM objects, and structures decision-making through a dependency tree to automate process restarts and reduce restart time in SMP systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If current systems execute scripts during restart without considering NVM object properties, then system restart can proceed, but security risks increase and execution efficiency decreases
Solution Approach 1:
The system performs preliminary classification of NVM objects into executable and non-executable categories before the restart process. Property units examine and mark NVM objects with appropriate properties (executable, non-executable, volatile, non-volatile) during normal operation, so that during restart, the action units can immediately execute or discard objects based on pre-determined properties without security risks or efficiency losses
Solution Approach 2:
Property units act as intermediaries between the NVM storage system and the execution system. These units examine NVM objects, determine their properties (executable status, volatility), and provide this information to action units, which then make informed decisions about whether to execute, retain, or discard objects during restart, thereby resolving the contradiction between security and efficiency
2Ease of operation
If all NVM objects are executed during restart, then process resumption is simplified, but system security is compromised
Solution Approach 1:
The system segments NVM objects into distinct categories based on their properties: executable objects, non-executable objects, volatile objects, and non-volatile objects. This segmentation is performed by property units that examine each NVM object and assign appropriate markers. During restart, action units execute only the segmented executable objects while discarding non-executable ones, achieving both ease of operation for legitimate processes and security by preventing execution of malicious code
Solution Approach 2:
Different quality attributes (executable status, volatility markers) are assigned to different NVM objects based on their local characteristics. Instead of treating all NVM objects uniformly, the system applies local quality assessment through property units that examine individual objects and assign specific properties, enabling selective execution that balances ease of operation with security requirements
3Reliability
If NVM objects are examined for properties during restart, then execution decisions are improved, but restart time increases
Solution Approach 1:
Property units examine and mark NVM objects with their properties (executable, non-executable, volatile, non-volatile) during normal system operation, before restart occurs. This preliminary action ensures that during restart, the action units can make execution decisions based on pre-determined properties without performing time-consuming examinations, thus improving execution accuracy while minimizing restart time
Solution Approach 2:
The system performs property examination and classification work beforehand during normal operation, cushioning against the time loss that would otherwise occur during restart. By having all NVM objects pre-marked with their properties, the system prepares in advance for the restart scenario, ensuring both accurate execution decisions and minimal restart time
Data Source
AI summary
A property is determined of an object in nonvolatile memory (NVM) of a device after the device is restarted. An action is performed on the NVM object based on the determined property of the NVM object. The property includes at least one of a volatility and executable information of the NVM object.