Remote Software Package Verification to Reduce Developer Machine Load
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Developers face heavy loads on their machines when verifying the safety of software packages due to the need for on-demand verification, which is not adequately addressed by existing techniques, leading to decreased convenience and difficulty in thorough verification.
Innovation Solution
A verification device and system that constructs a testing environment consistent with the developer's environment, performs installation verification, and relays the package based on the verification result, reducing the load on the developer's machine.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the developer performs verification in their own development environment, then the verification is thorough and accurate, but heavy loads are placed on the developer's machine
Solution Approach 1:
The patent introduces a verification device as an intermediary between the distribution server and the terminal device. This verification device performs the verification process on its own system rather than on the developer's machine, thereby maintaining verification accuracy while relieving the developer's machine from heavy computational loads
Solution Approach 2:
The system segments the verification process from the installation process. The verification device handles the verification of distribution packages independently before they are installed on the terminal device, separating the computationally intensive verification task from the developer's development environment
2Loss of time
If the developer performs verification at the timing of installation, then the verification is timely, but heavy loads are placed on the machine which decreases convenience
Solution Approach 1:
The verification device acts as an intermediary that handles verification requests from terminal devices. It receives installation requests, performs verification in the background on its own system, and then provides verification results and verified packages back to the terminal device, maintaining timely verification while improving developer convenience
Solution Approach 2:
The verification device performs verification actions in advance before the package is installed on the terminal device. By pre-verifying packages and caching verification results, the system ensures verification is completed timely without burdening the developer's machine during the installation moment
3Reliability
If thorough verification is performed by the developer, then package safety is ensured, but the verification work becomes difficult to perform
Solution Approach 1:
The verification device serves as a specialized intermediary system that handles the complexity of thorough verification. It implements comprehensive verification mechanisms including sandbox execution, behavior monitoring, and malicious activity detection, ensuring package safety while shielding the developer from the underlying verification complexity
Solution Approach 2:
The verification device performs self-service verification by automatically executing packages in sandbox environments, monitoring their behavior, and detecting malicious activities without requiring developer intervention. The system autonomously completes thorough verification and provides results to the terminal device
Data Source
AI summary
An object is to provide a verification device capable of securely verifying a package with less loads on a developer side. A verification device according to the present disclosure includes a receiving means for receiving, between a distribution server that distributes a distribution package for software development and a terminal device, an installation request for the distribution package transmitted from the terminal device, an acquisition means for acquiring, from the distribution server, the distribution package requested by the received installation request, a construction means for constructing a testing environment consistent with a development environment of the terminal device on the basis of the received installation request, a verification means for performing installation verification of the acquired distribution package by using the constructed testing environment, and a transmitting means for transmitting the acquired distribution package to the terminal device on the basis of a verification result of the installation verification.