Storage Device Kernel Access Control for Malicious Application Blocking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security technologies are ineffective in blocking malicious applications from unauthorized access to storage devices, as they can be easily evaded by evolving malware, and data backup solutions require additional storage space which can also be infected.
Innovation Solution
Implementing an access control mechanism in a storage device using a kernel that maps and manages memory address information and access codes, storing authorized access codes in a database to control access requests from applications, thereby blocking unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If behavior pattern monitoring is used to detect malicious programs, then detection capability is improved, but the system can be easily evaded by evolving malware
Solution Approach 1:
The patent creates backup copies of files before they are potentially infected by malicious programs. This preliminary action ensures that even if the current file becomes infected, a clean version exists for restoration, making the system resistant to evolving malware that may bypass behavior pattern detection
Solution Approach 2:
The patent maintains backup copies of files in storage devices. When a file is detected as malicious or suspicious, the system can restore from these backup copies rather than relying solely on detection accuracy, providing resilience against evolving malware variants
2Reliability
If data backup technology is used to restore infected files, then file recovery is improved, but additional storage space is required and backed up data can also be infected
Solution Approach 1:
The system performs backup operations preliminarily, creating backup copies before files are infected. This timing strategy ensures that backup space is utilized efficiently and that restored files come from pre-infection states, preventing the issue of infected backups
3Reliability
If access control is implemented at the file system level, then security is improved, but malicious applications can bypass the control mechanism
Solution Approach 1:
The patent divides the access control mechanism into multiple layers: file system level control and storage device level control. By segmenting the security architecture, even if one layer is bypassed, the other layer remains effective in blocking malicious applications
Solution Approach 2:
The storage device acts as an intermediary between the file system and the actual data storage. It implements its own access control logic that independently verifies application permissions, preventing bypass attempts that may succeed at the file system level
Data Source
AI summary
Disclosed is a system for controlling access of one or more applications to a storage device, including: a storage device including one or more memories; and a kernel implemented between the applications and the storage device, in which when the kernel receives a first access request to the storage device from a first application, the kernel transmits to the storage device first memory address information to be accessed by the first application and a first access code included in the first access request, and the storage device stores a database for an authorized access code for each memory address information and controls the first application to access a memory corresponding to the first memory address information according to whether the first memory address information and the first access code are present in the database.