Sandbox Isolation for Denial-of-Service Attack Mitigation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security measures in distributed computing environments are inadequate in preventing denial-of-service (DOS) attacks and protecting against untrusted content, as they lack the ability to isolate and control resource access effectively, allowing malicious content to consume system resources and render systems unusable.
Innovation Solution
The implementation of a sandbox tool that creates an isolated execution environment using task control groups (cgroups) within a secure operating system, limiting hardware resource usage and preventing malicious content from accessing excessive resources, thereby preventing DOS attacks and ensuring system safety.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access controls are placed on application programs to prevent DOS attacks, then system security is improved, but the application program cannot be utilized
Solution Approach 1:
The patent segments the system into isolated execution environments (sandboxes) where untrusted application programs can run. Each sandbox is a separate containment unit that isolates the program from the host system, allowing the program to execute with limited access controls without preventing its utilization. The program is divided into trusted components (host system) and untrusted components (sandboxed application), resolving the contradiction between security and usability.
Solution Approach 2:
The patent introduces an intermediary layer (the sandbox execution environment) between the application program and the host system. This intermediary acts as a mediator that allows the program to run while enforcing access controls and preventing DOS attacks. The intermediary translates program requests into controlled system calls, maintaining both security and program functionality.
2Reliability
If filtering and anti-virus programs are configured with known dangerous content identities, then known threats are blocked, but previously unknown and emerging threats cannot be stopped
Solution Approach 1:
The patent applies preliminary action by creating isolated execution environments for all untrusted content before it can execute maliciously. Instead of waiting to identify known threats through filtering, the system preemptively sandboxes untrusted programs, preventing them from causing harm regardless of whether they are known or emerging threats. This preliminary containment resolves the contradiction between blocking known threats and handling unknown threats.
3Ease of operation
If an application program is allowed to run with full access, then the program can be utilized fully, but the program can harm the user's computing system through DOS attacks
Solution Approach 1:
The patent applies local quality by giving different access levels to different parts of the system. The sandboxed application program receives full access within its isolated environment, maintaining program functionality. Meanwhile, the host system maintains full access controls, preventing DOS attacks. Each region (sandbox vs. host) has appropriate access qualities, resolving the contradiction between program utilization and system protection.
Data Source
AI summary
A processor receives within a user interface of a process server on a first computer system a first signal that includes a request to create an isolated execution environment within a host environment controlled by an operating system executing on a second computer system, receives a second signal that specifies a control group, which specifies an amount of hardware resources on the second computer system that are accessible to the isolated execution environment, for the isolated execution environment. The processor generates a third signal that requests creation by a processor of the second computer system of the isolated execution environment and application of the control group to the isolated execution environment. The processor then repeatedly monitors for signals, from the second computer system, that report on one of an activity and a status of the isolated execution, and displays in the user interface information reflective of such signals.