Software Image Vulnerability Exploitability Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods fail to effectively determine the exploitability of vulnerabilities in software images running on target computers, leading to unknown security gaps and potential attacks.
Innovation Solution
A method for automatic analysis of exploitability involves identifying software components, determining vulnerabilities, assigning associated exploits, and executing them on a specific runtime environment to confirm exploitability, with results reported to users and manufacturers for necessary updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If vulnerabilities are identified in software images, then security gaps are detected, but it is unknown whether these vulnerabilities can be exploited in the specific runtime environment
Solution Approach 1:
The patent creates a virtual copy of the runtime environment (sandbox) that replicates the target system's configuration, libraries, and execution context. This copy allows safe execution of exploits without risking actual systems while providing complete exploitability information for the specific runtime environment.
Solution Approach 2:
The patent performs preliminary execution of exploits in the sandboxed runtime environment before attempting actual exploitation. This preliminary testing phase determines exploitability in advance, allowing the system to identify which vulnerabilities are actually exploitable in the specific runtime configuration without direct system risk.
2Measurement precision
If all vulnerabilities are tested on the runtime environment, then accurate exploitability determination is achieved, but the analysis time and computational resources increase
Solution Approach 1:
The patent segments the vulnerability testing process into two phases: (1) identification phase where vulnerabilities are cataloged from software images, and (2) execution phase where only relevant exploits are tested in the sandbox. This segmentation allows efficient processing by separating data collection from active testing.
Solution Approach 2:
The patent applies partial action by selecting and testing only those exploits that are relevant to the specific runtime environment configuration, rather than exhaustively testing all possible vulnerabilities. The sandbox enables targeted testing of exploits based on the actual software components and library versions present in the runtime environment.
3Productivity
If software components are not activated in the runtime environment, then the software image runs efficiently, but vulnerabilities in unactivated components cannot be exploited
Solution Approach 1:
The sandboxed runtime environment creates a complete copy of the target system's activated components and their execution context. This copy accurately represents which software components are actually running and vulnerable, allowing the system to identify exploits for activated components without affecting the productivity of the original software execution.
Data Source
Figure 1~2
Figure 3
AI summary
Method for automatically analyzing the exploitability of vulnerabilities in a software image (12, 23) running on a target computer (31), comprising: - identifying (S1) all software components contained in the software image, - determining (S2) vulnerabilities of the identified software component for each software component of the software image (12, 23) using a vulnerability database (14, 25), - determining (S3) all exploits associated with at least one identified vulnerability of the software component for each identified software component using an exploit database (15, 26), - associating (S4) the identified exploits with the software image (12, 23), and - executing (S5) the software image (12, 23) and the exploits associated with the software image (12, 23) on a runtime environment configuration specific to the target computer (31).and - Confirm (S6) the exploitability of the at least one identified vulnerability on the specific configuration of the runtime environment (31) if the execution of the at least one exploit results in the exploitation of the vulnerability.