Software Whitelist Update via Related Instance Identification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securely updating whitelists to remove outdated and potentially compromised software, which can impair system security and availability.
Innovation Solution
An information processing apparatus that acquires distinctive information of software to be executed and identifies related software in the whitelist, allowing for the deletion of unnecessary software, thereby maintaining system security and availability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the whitelist is updated to remove outdated software, then system security is improved, but system availability may be impaired
Solution Approach 1:
The system performs preliminary identification of related software before executing whitelist updates. By acquiring distinctive information of software to be executed and identifying related software in advance, the system prepares deletion targets beforehand, ensuring that only appropriate software is removed from the whitelist, thus maintaining availability while improving security
Solution Approach 2:
The system uses feedback from distinctive information acquisition and related software identification to control the whitelist update process. The whitelist is updated based on feedback about which software is outdated and related to executed software, ensuring that updates are performed only when necessary and appropriate, balancing security improvement with availability maintenance
Data Source
AI summary
According to an embodiment, an information processing apparatus includes one or more processors. One or more processors acquire first distinctive information of a first piece of software to be executed. When a whitelist that specifies distinctive information of pieces of software that are permitted to be executed records the distinctive information indicating the first distinctive information, one or more processors distinctively identify, as second distinctive information, the distinctive information of a second piece of software that represents another piece of software relating to the first piece of software in the whitelist.