Secure File Launch via Protected Repository Copy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer systems are vulnerable to the installation of rogue shared libraries when executing executable files downloaded from insecure locations, as malicious libraries can be loaded into memory, posing security risks.
Innovation Solution
A method that detects executable files downloaded to insecure locations, generates a copy in a protected repository, and overwrites the original file with instructions to launch the copy from this secure location, ensuring that shared libraries are loaded from trusted directories, thereby preventing the execution of malicious libraries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If executable files are allowed to load shared libraries from the same directory, then ease of operation is improved, but security reliability deteriorates due to rogue libraries
Solution Approach 1:
The system segments the file system into secure and insecure directories. Executable files downloaded to insecure locations are automatically copied to secure directories where they can load shared libraries. This segmentation isolates the execution environment from potentially malicious files in the download location, allowing ease of operation while maintaining security reliability.
Solution Approach 2:
The system introduces an intermediary mechanism (automatic file copying and directory redirection) between the executable file and the shared library loading process. Instead of directly loading libraries from the download directory, the executable is redirected to a secure directory as an intermediary location, preventing rogue library execution while maintaining normal operation.
2Adaptability or versatility
If shared libraries are loaded from the downloaded files folder, then adaptability is improved, but harmful factors increase due to malicious libraries
Solution Approach 1:
The system performs preliminary action by automatically copying executable files from insecure download locations to secure directories before they execute. This preemptive measure ensures that when the executable loads shared libraries, it does so from a secure location, maintaining adaptability while preventing harmful factors from malicious libraries.
Solution Approach 2:
The system converts the potentially harmful situation of downloading executables to insecure locations into a benefit by automatically redirecting them to secure directories. The download process remains unchanged (maintaining adaptability), but the automatic redirection transforms the security risk into a protected execution environment.
3Reliability
If executable files are copied to a protected repository, then security reliability is improved, but device complexity increases
Solution Approach 1:
The system implements self-service by automatically monitoring download locations and copying executable files to secure directories without user intervention. The anti-malware application autonomously detects downloaded files, determines they are executables, and redirects them to protected repositories, improving security reliability while minimizing the perceived complexity for users.
Solution Approach 2:
The system changes the parameter of file location from insecure to secure by automatically copying executables between directories. This parameter change (location transformation) is performed transparently by the system, improving security reliability while the automation minimizes the operational complexity experienced by users.
Data Source
AI summary
The present disclosure relates to protecting computer systems from installation of rogue shared libraries when executable files are launched. An example method generally includes detecting that a downloaded file has been written to an insecure location on the computing device. A computing device determines that the downloaded file includes at least a first executable component and, upon determining that the downloaded file includes executable components, generates a copy of the executable component in a protected repository on the computing device. The computing device overwrites the contents of the executable component with at least instructions to launch the copy of the downloaded file from the protected repository.