Trusted Software and File Database for Rapid Hash Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Malicious actors exploit SEO techniques to distribute trojanized software, posing a security risk to end users, and existing systems struggle to efficiently validate software updates and files from trusted providers.
Innovation Solution
A trusted database is built with software updates and files from trusted third-party providers, using hash identifiers and machine learning to validate and update the database, allowing for rapid classification of incoming files and updates based on their presence in the database.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional validation methods are used for software updates and files, then security can be maintained, but processing time and computational resources increase significantly
Solution Approach 1:
The system performs preliminary actions by pre-validating software updates and files from trusted providers and storing their hash identifiers in a trusted database before they are needed. When a file needs validation, the system queries the pre-built database rather than performing comprehensive validation from scratch, significantly reducing processing time while maintaining security.
Solution Approach 2:
The system creates a copy of the validation process by using hash identifiers stored in the trusted database as references. Instead of re-validating the entire file contents, the system copies the validation results (hash identifiers) from the database to quickly determine file safety, reducing computational resources and processing time.
2Reliability
If comprehensive validation is performed on all software updates, then security is improved, but system resources and processing capacity are consumed excessively
Solution Approach 1:
The validation process is segmented into two parts: (1) comprehensive validation is performed only on new or unverified files and stored in the trusted database, and (2) subsequent validation queries simply retrieve pre-computed hash identifiers from the database. This segmentation separates the resource-intensive validation work from the quick lookup operations, improving overall processing efficiency.
Solution Approach 2:
The trusted database acts as an intermediary between the comprehensive validation system and the file validation process. It stores hash identifiers that mediate between the need for thorough validation and the need for fast processing, allowing the system to maintain high security while improving productivity by avoiding redundant validation work.
3Speed
If a trusted database is built and maintained with software updates, then validation speed increases, but database management complexity increases
Solution Approach 1:
The system implements self-service by automatically receiving software updates from trusted providers, generating hash identifiers, validating files, and updating the trusted database without manual intervention. This automation reduces the operational complexity of database management while maintaining fast validation speeds through continuous automatic updates.
Data Source
AI summary
A computer-implemented method includes building, with a network security platform, a trusted database having software including software updates and files including file information from trusted third party software providers. The computer-implemented method further includes receiving a software update or file from a third party software provider, determining an identifier for the software update or file, validating the software update or file to determine validity of the software update or file, and determining whether to update the trusted database with the identifier for the software update or file.