Task Access Behavior Security for File Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Information handling systems are vulnerable to malicious activities due to complexity and security flaws, with existing access control mechanisms failing to prevent unauthorized file access, especially in environments with numerous applications and users, where manual approval is impractical and prone to abuse.
Innovation Solution
Implementing a task access behavior based site security method that records file accesses, generates permissions records, intercepts and compares file access requests, and blocks unauthorized access, using a user space security process and hooked OS code to monitor and manage file access, with a master security process for remote coordination and user authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual user approval is used for file access control, then security can be maintained through human judgment, but the system becomes impractical and prone to abuse in environments with numerous applications and users
Solution Approach 1:
The system automatically monitors file access patterns, generates permissions records, and enforces access control without requiring manual user approval. The security process autonomously determines whether file access requests are legitimate based on recorded behavior patterns, eliminating the need for human intervention while maintaining security.
Solution Approach 2:
The system records and analyzes file access patterns during a monitoring phase to establish baseline behavior before enforcement begins. This preliminary action creates the permissions record that will be used for automatic access control, allowing the system to make informed security decisions without manual approval during normal operation.
2Reliability
If existing access control mechanisms are used, then some level of security is provided, but they fail to prevent unauthorized file access in complex environments
Solution Approach 1:
The system continuously monitors file access requests, compares them against recorded permissions, and enforces access control decisions. This closed-loop feedback mechanism automatically adapts to legitimate access patterns while blocking unauthorized access, providing effective security without requiring complex manual configuration or management.
Solution Approach 2:
The security process acts as an intermediary layer between applications and the file system. It intercepts file access requests, consults the permissions record, and either allows or blocks access accordingly. This intermediary approach provides robust security without requiring changes to existing applications or complex reconfiguration of the operating system.
3Extent of automation
If automated permission management is implemented, then security is enhanced and manual approval is eliminated, but the system requires sophisticated monitoring and enforcement mechanisms
Solution Approach 1:
The system combines file system monitoring, permissions record generation, and access control enforcement into a single integrated security process. By merging these functions into one cohesive mechanism, the system achieves high automation without proportionally increasing complexity, as the components work together rather than as separate systems.
Solution Approach 2:
The security process performs multiple functions: monitoring file access patterns, generating permissions records, intercepting access requests, and enforcing access control. This multi-functional approach allows the system to achieve comprehensive automation through a single versatile mechanism rather than requiring separate systems for each function.
Data Source
AI summary
A method for task access behavior based site security includes recording file accesses by an application and user during operation; automatically generating a permissions record indicating allowable access to files by the application and user based on the recorded file accesses; intercepting a file access request; comparing the file access request to a permissions record; and blocking access to the file when the file access is not included in the permissions record.