USB Malware-Scanning Adaptor for OT File Transfer Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial control systems face challenges in ensuring OT security when using removable storage devices, as existing methods require frequent scanning of USB storage devices for malware, which can be inconvenient and may void warranties, and visitors are hesitant to use special-purpose devices.
Innovation Solution
An adaptor with non-volatile memory that stores a scan engine is used to connect to a host computer and removable storage devices, scanning files for malware during copying, utilizing AMA SCSI commands to control access and facilitate malware detection without requiring special security drivers on the industrial control system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a dedicated scan box is used to scan USB storage devices for malware, then OT security is improved, but the complexity of the system increases and requires special security drivers that may void warranties
Solution Approach 1:
The patent introduces an adaptor as an intermediary device between the host computer and removable storage device. The adaptor contains a scan engine that automatically scans files during the copying process, eliminating the need for a separate dedicated scan box and special security drivers on the industrial control system. This intermediary approach maintains security while reducing system complexity.
Solution Approach 2:
The scanning function is extracted from the host computer or dedicated scan box and embedded directly into the adaptor. This allows the scanning capability to be removed from the main system, avoiding the need for special security drivers on the industrial control system and reducing overall system complexity while maintaining security.
2Measurement precision
If USB storage devices are re-scanned after each insertion to industrial control systems, then malware detection accuracy is improved, but the time required for file copying increases
Solution Approach 1:
The scan engine performs malware scanning during the file copying process itself, rather than requiring a separate pre-scan or post-scan step. Files are scanned automatically as they are being copied from the removable storage device to the host computer, ensuring malware detection accuracy is maintained while minimizing additional time requirements.
Solution Approach 2:
The scanning operation continues concurrently with the file copying operation. Instead of stopping the copying process to perform scans or requiring re-scans after insertion, the scan engine continuously scans files as they are transferred, maintaining both detection accuracy and efficient file transfer throughput.
3Reliability
If special-purpose USB storage devices with built-in scanners are used, then malware scanning capability is improved, but ease of operation deteriorates because visitors are hesitant to use non-ubiquitous devices
Solution Approach 1:
The adaptor is designed to work with standard, ubiquitous USB storage devices rather than requiring special-purpose devices. The scan engine in the adaptor provides malware scanning capability for any removable storage device connected through it, combining the universality of standard USB devices with the security capability of specialized scanners.
Solution Approach 2:
The adaptor serves as an intermediary that adds scanning functionality to ordinary USB storage devices. Instead of requiring users to change their behavior and use special devices, the adaptor transparently intercepts and scans file transfers from any USB device, maintaining ease of operation while improving security capability.
Data Source
AI summary
An adaptor includes non-volatile memory that stores a scan engine. A removable storage device is connected to the adaptor, which in turn is connected to a host computer. Files being copied between the removable storage device and the host computer through the adaptor are scanned for malware using the scan engine.