Process Trust Value Management for System Stability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computing systems face inefficiencies and potential crashes due to frequent activation of processes by malicious data attacks, leading to high operational resource consumption and system overload.
Innovation Solution
A method to determine and adjust a process's trigger frequency within a preset duration, managing its state based on a trust value that represents its trustworthiness, including rebooting or terminating processes to prevent resource overconsumption and ensure system stability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If processes are frequently activated to respond to data, then system responsiveness is improved, but operational resource consumption increases and system stability deteriorates
Solution Approach 1:
The patent applies dynamics by making the process activation threshold adaptive rather than fixed. The system dynamically adjusts the trigger frequency based on the process's trust value, which changes over time based on observed behavior. This allows the system to respond quickly to legitimate data while reducing activation frequency for suspicious patterns, thereby optimizing resource consumption without sacrificing responsiveness.
Solution Approach 2:
The patent changes the parameter of trigger frequency based on the trust value. Instead of a static threshold, the system modifies the activation threshold dynamically. When trust value decreases (indicating potential malicious behavior), the trigger frequency is reduced, preventing resource-wasting activations. When trust value is high, the system maintains high responsiveness. This parameter change resolves the contradiction between speed and resource consumption.
2Speed
If process activation threshold is lowered to improve responsiveness, then system speed is improved, but system stability and security deteriorate
Solution Approach 1:
The patent implements feedback by continuously monitoring process behavior and adjusting the trust value based on observed trigger frequencies. The system feeds back the observed data to modify the activation threshold dynamically. This feedback mechanism allows the system to maintain high responsiveness for legitimate processes while automatically reducing activation frequency when suspicious patterns are detected, thereby preserving system stability.
Solution Approach 2:
The patent applies preliminary action by establishing an initial high trust value and corresponding low activation threshold before any behavior observation. As the process operates and data is received, the system preliminarily builds up trust evidence. Only when the trust value decreases below a threshold due to suspicious behavior does the system adjust the activation threshold. This preliminary setup ensures high responsiveness initially while preventing instability through evidence-based adjustments.
3Difficulty of detecting and measuring
If trust value is continuously adjusted to detect attacks, then detection capability is improved, but processing complexity increases
Solution Approach 1:
The patent simplifies the complexity by changing only one key parameter - the trust value - rather than implementing complex multi-parameter monitoring systems. The trust value is a single scalar metric that encapsulates the process's behavior history. By adjusting this single parameter based on trigger frequency observations, the system achieves effective attack detection without the complexity of multiple interdependent monitoring mechanisms.
Solution Approach 2:
The patent extracts the essential feature of process behavior (trigger frequency) and uses it to adjust the trust value. Instead of analyzing multiple complex behavior dimensions, the system extracts the single most indicative parameter - how frequently the process is activated - and uses this to make trust assessments. This extraction simplifies the detection mechanism while maintaining effectiveness against attacks.
Data Source
AI summary
A method, a device, and a computer-readable storage medium for managing processes are disclosed. The method includes (i) determining a trigger frequency at which a process is activated due to receipt of data within a preset duration, (ii) adjusting a current trust value corresponding to the process based on the trigger frequency, wherein the current trust value is used to indicate the degree of trustworthiness when the process is currently in the normal state, and (iii) managing the state of the process based on the adjusted result of the trust value.