Symbol Analysis System Using Pre-computed Logic Paths
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer systems face challenges in efficiently analyzing symbols and messages to prevent unauthorized access and misuse, particularly due to the limitations of firewalls, virus scanning software, and intrusion detection systems, which struggle with handling high traffic volumes and generating new rules in real-time.
Innovation Solution
A computer-implemented method using first-order logic and stochastic logic programs to analyze symbols by determining successful paths through codified rules, grouping them into patterns, and applying instrumentation to improve efficiency, allowing for real-time processing with minimal computational overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If intrusion detection systems generate new rules for new messages using inductive logic programming, then the system can adapt to new threats, but the time taken to generate rules becomes prohibitive and cannot handle high traffic volumes
Solution Approach 1:
The patent pre-computes and stores all possible rule paths in a compressed representation during an offline phase. This preliminary action allows the system to avoid generating rules in real-time, instead simply matching incoming messages against pre-computed patterns, thus resolving the contradiction between adaptability and processing speed
Solution Approach 2:
The system dynamically switches between two modes: offline rule generation (comprehensive but slow) and online message matching (fast but simple). This dynamic approach allows the system to perform complex rule generation when traffic is low and simple matching when traffic is high, resolving the speed-adaptability contradiction
2Reliability
If intrusion detection systems analyze all computer messages against known rules, then security detection accuracy improves, but processing delays become unacceptable for users
Solution Approach 1:
The patent extracts only the essential structural patterns from complex security rules, storing them in a compressed form. This extraction allows the system to retain security detection capability while reducing the computational overhead to acceptable levels, thus resolving the contradiction between accuracy and speed
Solution Approach 2:
The system changes the parameter of rule representation from detailed, explicit security rules to compressed structural patterns. This parameter change maintains the ability to detect security threats while dramatically reducing processing time, resolving the accuracy-delay contradiction
3Adaptability or versatility
If firewalls allow third party access to web servers for e-commerce operations, then business functionality is enabled, but the system becomes vulnerable to hacking and unauthorized access
Solution Approach 1:
The patent introduces an intermediary analysis layer between the firewall and the web server. This intermediary monitors and analyzes incoming messages using structural pattern matching, allowing legitimate e-commerce traffic to pass while blocking malicious messages, thus resolving the contradiction between functionality and security
Data Source
AI summary
A computer-implemented method of analyzing symbols in a computer system, and a computer program and apparatus therefor are provided. The symbols conform to a specification for the symbols. The specification is codified into a set of computer-readable rules. The symbols are analyzed using the computer-readable rules to obtains patterns of the symbols by: determining the path that is taken by the symbols through the rules that successfully terminates, and grouping the symbols according to said paths.