Protective Control Device for Kernel Memory Access Permissions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The kernel of a computer system is vulnerable to compromise by malware or attackers, which can lead to unauthorized access and compromise of protective mechanisms, as existing security measures rely on the proper functioning of the kernel.
Innovation Solution
A protective control device is implemented between the processor and system memory to determine access permissions for memory regions based on system initialization events and permissions information, using a permissions table to control access and prevent modification of critical kernel data, even if the kernel becomes compromised.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the kernel is used to control memory access permissions, then the system can maintain proper access control during normal operation, but the security mechanism becomes vulnerable to compromise when the kernel is attacked by malware
Solution Approach 1:
A protective control device is introduced as an intermediary component between the processor and system memory. This device independently determines access permissions for memory regions containing kernel information, bypassing the need for kernel-mediated permission control. The protective control device receives access requests, determines whether access is permitted based on permissions information, and controls the processor's access to memory regions, thereby preventing malware from compromising security through kernel attacks.
2Reliability
If a protective control device is introduced to protect kernel memory regions, then security against kernel compromise is improved, but the system complexity increases
Solution Approach 1:
The memory system is segmented into multiple memory regions, each with distinct access permissions. The protective control device maintains a permissions table that defines access rules for each memory region independently. This segmentation allows the system to protect critical kernel regions without affecting the functionality of other memory areas, and the modular structure of the protective control device keeps its internal complexity manageable.
Solution Approach 2:
Access permissions for memory regions are predetermined and stored in a permissions table before any access requests occur. The protective control device is pre-configured with permissions information that specifies which processors can access which memory regions. This preliminary configuration eliminates the need for dynamic permission negotiation during runtime, simplifying the control logic while maintaining robust security.
Data Source
AI summary
In some examples, a control device includes a controller to receive, from a requester device that is separate from the control device, a request to access a first memory region of a memory. The controller is to determine, based on occurrence of a systems initialization event and according to permissions information that identifies access permissions for respective memory regions of the memory, whether access of content in the first memory region is allowed.