Privacy Annotation for Cloud Snapshots via Differential Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In DevOps scenarios, removing sensitive information from system snapshots is time-consuming and difficult, necessitating a method to identify and isolate differences between snapshots for secure sharing.
Innovation Solution
A computer-implemented method that identifies file pairs with differences between snapshots, performs pattern reducing and commonality reducing processes to remove non-sensitive differences, and annotates remaining files as potentially sensitive, thereby preventing sensitive data divulgence.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual removal of sensitive information from snapshots is performed, then security is improved, but time consumption and difficulty increase
Solution Approach 1:
The patent replaces manual mechanical review processes with automated differential analysis systems that use algorithms to identify sensitive information in snapshots, dramatically reducing time consumption while maintaining or improving security detection capability
Solution Approach 2:
The system creates differential copies of snapshots to analyze changes without modifying original sensitive data, enabling automated detection of sensitive information through comparison while preserving the integrity of source snapshots
2Reliability
If complete removal of sensitive information is attempted, then security is improved, but complexity and difficulty increase
Solution Approach 1:
The patent segments the complex task of sensitive information removal into distinct phases: differential analysis to identify changes, pattern recognition to detect sensitive data types, and selective annotation or removal, making the overall process more manageable and automatable
Solution Approach 2:
The system introduces intermediary components including differential analysis engines and pattern matching modules that act as mediators between raw snapshots and final cleaned images, automating the complex detection and removal processes
3Measurement precision
If differential analysis is performed on all files, then detection accuracy is improved, but processing time increases
Solution Approach 1:
The patent applies partial action by performing differential analysis selectively on files that show changes between snapshots, rather than analyzing all files comprehensively, thereby reducing processing time while maintaining detection accuracy for modified files where sensitive information is most likely to appear
Data Source
AI summary
A method is provided for preventing divulgation of sensitive data in two snapshots, taken at different times, of one or more same systems in a cloud environment. The method includes identifying a set of files from among a plurality of file pairs. Each file pair is formed from a respective file that includes at least one difference with respect to each snapshot. The method includes performing a pattern reducing process that removes, from the set of files, any of the files having, as the difference, a predetermined non-sensitive difference between respective executions of a pre-determined system operation. The method includes performing a commonality reducing process that removes, from the set of files, any files having, as the difference, a common difference between different users. The method includes annotating data in remaining files in the set of files as potentially being the sensitive data, subsequent to the reducing processes.