Shell Command Safety Control for Embedded Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current access control methods for shell commands in embedded systems are inadequate, allowing unauthorized execution and posing risks of secondary damage, especially in critical systems like motor vehicles and smart devices, due to limitations in restricting unnecessary commands and processes.
Innovation Solution
Implementing a shell command detection and execution control system that uses a safety grade table to assess the safety of shell commands, requires a password for unsafe commands, and includes a hacking examination part to block execution of potentially harmful commands by checking against a hacking command list and security file list.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the administrator account shell is hacked, then all shell commands can be executed, but secondary damage occurs such as hard disk removal and system log deletion
Solution Approach 1:
The patent introduces a shell command safe execution guaranteeing apparatus as an intermediary layer between the shell command and the kernel. This apparatus includes a shell command detection part that intercepts shell commands before execution, a shell command execution control part that controls whether to execute based on safety assessment, and a hacking examination part that specifically checks for hacking attempts. This intermediary structure allows normal administrator commands to execute freely while blocking harmful commands that would cause secondary damage.
2Object-affected harmful factors
If unnecessary commands are removed from the embedded system, then security is improved, but system functionality and adaptability are reduced
Solution Approach 1:
The patent extracts the safety assessment and hacking detection functionality from the core command execution path and places it in a separate guaranteeing apparatus. The apparatus includes a shell command detection part, execution control part, and hacking examination part that operate independently. This allows the embedded system to retain all necessary commands for functionality while the extracted security layer filters out harmful commands, thus maintaining both adaptability and security.
3Reliability
If a password verification system is implemented for shell commands, then unauthorized execution is prevented, but system complexity and operation time increase
Solution Approach 1:
The patent implements partial verification by the hacking examination part that specifically checks for hacking-related commands and patterns rather than requiring full password verification for all commands. The apparatus assesses whether a command appears to be a hacking attempt based on predefined criteria and blocks only those suspicious commands. This partial action approach provides adequate security against hacking while avoiding the excessive complexity of comprehensive password verification for every command execution.
Data Source
AI summary
Provided are an apparatus and method for enhancing security and safety of an embedded system by monitoring and blocking unauthorized execution of a shell command in the embedded system.The apparatus for guaranteeing safe execution of the shell command in the embedded system includes a shell command detection part configured to detect an execution request of the shell command, and a shell command execution control part configured to control execution of the shell command according to whether a password based on safety is provided for the detected shell command.