Virtual Machine Interceptor for Malicious Code Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security mechanisms fail to detect unwanted code, such as viruses and spyware, before they compromise a system, leading to potential damage or data theft, as they often rely on traditional scanning methods that may not detect threats in time.
Innovation Solution
A security system utilizing a virtual machine to process incoming requests, identify unwanted effects, and prevent their propagation to a target computer by intercepting and analyzing requests, allowing or denying access based on the presence of malicious code, and employing techniques like snapshots for rollback and quarantine.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional scanning methods are used to detect unwanted code, then the scanning process can be performed, but the detection occurs too late after the system has already been compromised
Solution Approach 1:
The patent performs preliminary actions by executing the request in a virtual machine environment before allowing it to reach the target computer. This proactive approach detects unwanted effects before they can compromise the actual system, resolving the timing issue by moving detection from post-compromise to pre-execution stage.
Solution Approach 2:
The virtual machine acts as an intermediary between the incoming request and the target computer. By routing requests through this intermediate environment, the system can observe and detect unwanted effects without exposing the actual target system, thereby achieving early detection while maintaining system safety.
2Speed
If a virtual machine is used to process requests in real-time, then detection speed is improved, but system complexity increases
Solution Approach 1:
The patent creates a virtual copy of the target computer environment to process requests. This copying approach enables parallel processing and real-time detection without adding complex hardware components to the actual system, as the virtual machine can be implemented through software virtualization layers.
Data Source
AI summary
A security system, method and computer program product are provided. In use, a request destined to a target computer is received, utilizing a virtual machine. The request is processed to identify an unwanted effect associated therewith, utilizing the virtual machine. In addition, the target computer is allowed access to the request, based on the processing.