Processing Unit Execution Time Monitoring for Software Attack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing processing units are vulnerable to attacks where malicious code is injected into system libraries or standard libraries, allowing manipulations of system calls and program function calls, which can go undetected due to lack of reliable execution time monitoring.
Innovation Solution
Configuring the processing unit to measure and compare the execution time of program functions against setpoint values to detect deviations, triggering an error response if the actual execution time differs significantly, thereby indicating potential manipulation or attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If program functions are exchanged for manipulated program functions containing malicious code, then the processing unit can perform additional functions (e.g., data manipulation, unauthorized transmission), but the reliability and safety of the processing unit deteriorates
Solution Approach 1:
The patent applies preliminary action by measuring and storing the execution time of original program functions before they can be manipulated. This pre-established baseline allows the system to detect any deviations caused by malicious code injection, preventing reliability degradation while maintaining functional adaptability.
Solution Approach 2:
The system implements feedback by continuously monitoring the execution time of program functions and comparing it against stored reference values. When deviations exceed a threshold, the system triggers error responses or notifications, creating a closed-loop security mechanism that maintains reliability despite potential functional changes.
2Reliability
If execution time monitoring is implemented to detect manipulations, then the reliability and safety of the processing unit improves, but the device complexity increases
Solution Approach 1:
The processing unit performs self-monitoring of its own program function execution times using its existing timing capabilities. This self-service approach eliminates the need for external monitoring hardware, reducing device complexity while maintaining reliability improvements through automated detection.
Solution Approach 2:
The system monitors a single parameter (execution time) rather than multiple complex security metrics. By focusing on this one measurable parameter and comparing it against stored reference values, the system achieves reliable manipulation detection with minimal additional complexity.
3Measurement precision
If the processing unit measures and compares execution time for every program function, then the detection precision of manipulations improves, but the loss of time for measurement and comparison increases
Solution Approach 1:
The system applies partial action by monitoring only critical program functions whose manipulation would have significant security impact. Not all program functions require execution time monitoring, allowing the system to achieve sufficient detection precision for security-critical operations while minimizing time loss on non-critical functions.
Solution Approach 2:
The patent replaces complex security verification mechanisms with simple time measurement and comparison. Instead of using elaborate authentication or integrity checking systems, the invention uses basic timing operations that can be performed efficiently with minimal time overhead while maintaining high detection precision.
Data Source
AI summary
A processing unit is configured to carry out at least one program function of a computer program, ascertain the execution time of the program function, and compare the ascertained execution time to a setpoint value to identify a software attack.