Software Integrity Measurement via Dynamic Manifest Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current integrity measurement systems for software-based computer systems are inadequate in providing complete and flexible characterization of software integrity, especially during runtime, and face challenges in protecting measurement data from corruption and minimizing performance impact.
Innovation Solution
A method involving dynamic data inspection, event triggers, and a measurement manifest to verify the integrity of computer programs by identifying data objects using relevant attributes, generating object graphs, and comparing baseline and measurement manifests, while ensuring protection and minimizing impact on the target system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If hashing is used for integrity measurement, then measurement computation is simple and fast, but it cannot produce complete determination of integrity for dynamic software systems
Solution Approach 1:
The patent segments the software system into multiple measurable components including binary images, runtime data structures, and execution states. Each segment is measured separately using appropriate techniques (hashing for static components, contextual inspection for dynamic components), allowing complete integrity determination while maintaining computational efficiency through selective measurement of critical segments.
Solution Approach 2:
The patent implements dynamic measurement capabilities that adapt to the runtime state of software systems. Measurement techniques are selected and applied based on the specific characteristics and state of each software component, enabling complete integrity assessment of dynamic systems while optimizing computation by measuring only relevant state changes rather than entire system states continuously.
2Measurement precision
If comprehensive measurement data is collected for complete integrity assessment, then integrity determination accuracy improves, but performance impact on the target system increases
Solution Approach 1:
The patent applies partial measurement by focusing on critical software components and state variables that have the greatest impact on integrity assessment. Rather than measuring all possible system states, the system identifies and measures only the essential elements needed for accurate integrity determination, reducing performance overhead while maintaining assessment accuracy through selective contextual inspection of key data structures and execution paths.
3Reliability
If measurement data is protected from corruption to ensure reliability, then system security improves, but device complexity increases
Solution Approach 1:
The patent introduces intermediary protection mechanisms including secure measurement agents, trusted execution environments, and cryptographic verification layers that mediate between the measurement processes and the target system. These intermediaries protect measurement data from corruption and tampering while maintaining a relatively simple interface with the target system, managing complexity through modular architecture and standardized protection protocols.
Data Source
AI summary
The present disclosure is directed towards methods and systems and methods for measuring the integrity of an operating system's execution and ensuring that the system's code is performing its intended functionality. This includes examining the integrity of the code that the operating system is executing as well as the data that the operating system accesses. Integrity violations can be detected in the dynamic portions of the code being executed.