Security Risk-Based Resource Allocation for Computing Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Malicious processes on computers consume resources, making them unavailable for legitimate processes, thereby negatively impacting their execution.
Innovation Solution
A system that allocates resources to processes based on their perceived security risk by determining risk scores and prioritizing resource allocation accordingly, ensuring that less likely malicious processes receive resources over more likely malicious ones, and may suspend or terminate processes to manage resource scarcity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If resources are allocated equally to all processes, then system simplicity is maintained, but malicious processes can consume resources and harm legitimate processes
Solution Approach 1:
The system performs preliminary risk assessment and classification of processes before resource allocation. By evaluating process characteristics and determining risk scores in advance, the system establishes priority levels that guide subsequent resource allocation decisions, preventing malicious processes from consuming resources before harm occurs
Solution Approach 2:
The patent introduces a risk score intermediary that mediates between process requests and resource allocation. This intermediary evaluates process characteristics, assigns risk scores, and translates them into priority levels, creating a layered decision-making structure that balances security requirements with resource management without requiring complex direct analysis of every process
2Productivity
If resources are prioritized to low-risk processes, then legitimate process execution is improved, but resource allocation complexity increases
Solution Approach 1:
The system changes the parameter of resource allocation from equal distribution to priority-based distribution using risk scores. By transforming the allocation parameter from uniform to differentiated based on process characteristics, the system improves legitimate process execution while maintaining manageable complexity through systematic evaluation criteria
3Measurement precision
If the system monitors and evaluates all processes for risk, then resource allocation accuracy improves, but system performance overhead increases
Solution Approach 1:
The system applies local quality by evaluating specific process characteristics that are relevant to risk assessment rather than analyzing all aspects of every process. By focusing on particular attributes such as process behavior patterns and resource usage characteristics, the system achieves adequate risk assessment accuracy with reduced computational overhead
Data Source
AI summary
Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for allocating resources to processes based on security risk. The methods include actions of receiving a request from a process executing on a system for an allocation of resources and identifying other processes executing on the system. Additional actions include determining, for each of the processes, a risk score that reflects a likelihood that the process is a malicious process and determining a resource allocation priority based on the risk scores of each of the processes. Further actions include allocating resources to the processes based on the resource allocation priority.