Structured Data Verification Using Element Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Determining whether structured data on a computing device includes malicious or unexpected code is challenging, especially when the data includes mutable elements that change over time, making it difficult to distinguish between expected changes and potential compromises.
Innovation Solution
A method and system for verifying structured data that involves deconstructing the data into elements, comparing these elements with standard elements, and analyzing element differences using a registry of comparisons and heuristic rules to determine if differences are expected or unexpected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If structured data is compared directly with standard structured data to identify differences, then the verification process is simple, but the accuracy of identifying malicious code deteriorates due to expected mutable changes
Solution Approach 1:
The patent segments structured data into individual elements and compares them separately against a registry of expected mutable elements. This allows the system to handle complexity by breaking down the verification process into manageable units while maintaining high accuracy through element-level analysis.
Solution Approach 2:
The patent introduces an intermediary registry of expected mutable elements that acts as a mediator between the structured data and standard data. This registry contains heuristic rules and statistical information about which elements are expected to change, allowing the system to filter out benign variations before comparing with standard data.
2Reliability
If all element differences are flagged as unexpected, then malicious code detection sensitivity is high, but false positive rate increases due to expected mutable changes
Solution Approach 1:
The patent uses feedback from statistical analysis of element comparisons to dynamically adjust the verification process. The system analyzes patterns of element differences across multiple structured data samples and uses this feedback to refine the registry of expected mutable elements, thereby reducing false positives while maintaining detection sensitivity.
Solution Approach 2:
The patent changes the parameters of element comparison by applying heuristic rules and statistical thresholds. Instead of treating all differences equally, the system adjusts the evaluation parameters based on the element type, frequency of occurrence, and deviation magnitude, allowing expected mutable changes to be distinguished from actual anomalies.
3Measurement precision
If statistical analysis is performed on large numbers of structured data samples, then the accuracy of determining expected vs. unexpected differences improves, but the processing time and computational resources increase
Solution Approach 1:
The patent performs preliminary statistical analysis on structured data samples before the actual verification process. By pre-computing the registry of expected mutable elements and their statistical characteristics, the system prepares the necessary information in advance, reducing the computational burden during real-time verification while maintaining high accuracy.
Data Source
AI summary
A method for verifying structured data includes receiving structured data, deconstructing the structured data into corresponding elements and obtaining standard structured data having corresponding standard elements. The method also includes comparing the elements of the structured data with the standard elements of the standard structured data to identify any element differences. For each element difference, the method includes comparing the element difference against a registry of element comparisons, determining whether the element difference is expected or unexpected based on a heuristic or at least one rule, and when the element difference is unexpected, generating a signal indicating the presence of an unexpected element in the structured data.


