Time-Window Sampling with Dynamic Biasing for Security Assurance

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Legacy security assurance approaches for computer systems are inadequate in addressing varying rates of data flow, leading to inadequate security assurance and increased risk of unauthorized access.

Innovation Solution

A method for sampling communications that involves determining a time window for validation, segmenting it into multiple time intervals, randomly selecting a set of intervals for sampling, and capturing every k-th sample within those intervals, with k-values determined based on historical data flow to compensate for variances in communication rates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If legacy security assurance approaches are used, then system simplicity is maintained, but security assurance reliability deteriorates due to inadequate sampling under varying data flow rates

Engineering Contradiction:

Improvesecurity assurance reliabilityVSAvoidadaptability to varying data flow rates

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The sampling rate is dynamically adjusted based on the observed data flow rate. When the data flow rate exceeds a threshold, the system automatically increases the sampling rate to capture sufficient security events. This dynamic adaptation ensures reliable security assurance across varying traffic conditions without requiring manual reconfiguration.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system changes the sampling parameter (sampling rate) in response to changing data flow conditions. By monitoring the data flow rate and adjusting the sampling rate accordingly, the system maintains adequate security event capture despite variations in traffic volume, thereby improving security assurance reliability.

Inventive Principle:

Principle #35Parameter changes

2Reliability

If sampling rate is increased to ensure adequate security assurance, then security assurance reliability improves, but resource consumption increases

Engineering Contradiction:

Improvesecurity assurance reliabilityVSAvoidresource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

Inventive Principle:

Principle #35Parameter changes

3Ease of manufacture

If fixed sampling intervals are used, then implementation simplicity is maintained, but predictability increases making the system vulnerable to malicious actors

Engineering Contradiction:

Improveimplementation simplicityVSAvoidpredictability to malicious actors

Core Design Contradiction:

Ease of manufactureVSObject-affected harmful factors

Solution Approach 1:

The sampling interval is dynamically adjusted based on the observed data flow rate. When traffic volume changes, the sampling interval adapts accordingly, preventing malicious actors from predicting when samples will be taken. This dynamic behavior maintains implementation simplicity while eliminating the predictability vulnerability of fixed intervals.

Inventive Principle:

Principle #15Dynamics

4Reliability

If sampling is performed at all data flow rates, then comprehensive security coverage is achieved, but resource efficiency deteriorates during low traffic periods

Engineering Contradiction:

Improvesecurity coverageVSAvoidresource efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS20250141904A1Time-window based multi-stage sampling with sample biasing

Publication Date: 2025.05.01 ORACLE INT CORP

AI summary

A sampling approach for time-window based multi-stage sampling. The sampling approach can determine whether received communications are of a stratum that is rare and determine a sampling mechanism for the communication based on whether the stratum is rare. The sampling system defines multiple time windows for sampling communications received by a computing system. The time windows are segmented into multiple time intervals. A portion of the multiple time intervals are randomly selected for sampling. A portion of the communications received during the selected time intervals are captured for security assurance purposes.