VM Isolation for Stable Abnormality Response in ECU
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional memory protection technologies, such as StackCanary and CFI, fail to guarantee a stable abnormality response process when applied to privileged layers like the Operating System, as the response function itself can be attacked, leading to instability in handling software vulnerabilities.
Innovation Solution
An information processing apparatus and method that isolates the detection and response processes using a first Virtual Machine (VM) and a second VM operating on a HyperVisor, where the first VM detects abnormalities and notifies the second VM, which then executes a responsive process based on the detected information, ensuring stability by avoiding attacks on the response function.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If memory protection technologies (StackCanary, CFI, DEP) are applied to privileged layers like OS, then software vulnerability protection is improved, but the stability of abnormality response process deteriorates because the response function itself can be attacked
Solution Approach 1:
The system divides the abnormality response function into separate components: a detection unit that detects abnormalities and a respondent unit that executes response processes. By segmenting these functions and placing them in different execution contexts (detection in one VM, response in another VM via HV), the patent prevents attacks on the response function while maintaining protection capabilities.
Solution Approach 2:
The HyperVisor (HV) acts as an intermediary between the detection unit and the respondent unit. When an abnormality is detected, the HV facilitates communication to notify the second VM of the abnormality information, enabling the respondent unit to execute appropriate responses without direct exposure to attack vectors.
2Device complexity
If the same VM executes both detection and response functions, then device complexity is reduced, but security reliability deteriorates because the response function can be compromised by attacks
Solution Approach 1:
The patent segments the abnormality handling system across multiple VMs: the first VM contains the detection unit while the second VM contains the respondent unit. This segmentation increases structural complexity but ensures that the response function cannot be compromised by attacks on the detection function, thereby improving reliability.
Solution Approach 2:
The HV serves as an intermediary that enables communication between the detection unit in the first VM and the respondent unit in the second VM. This intermediary architecture allows the system to achieve high reliability by isolating the response function from potential attack vectors while maintaining coordinated operation.
Data Source
AI summary
An ECU (Electronic Control Unit) includes a HV (HyperVisor), and a first VM (Virtual Machine) and a second VM that operate on the HV. The first VM detects an abnormality in a process in the first VM. When the first VM detects an abnormality, the first VM notifies the second VM of information related to the abnormality via the HV. The second VM executes a process responsive to the abnormality, based on the information related to the abnormality provided from the first VM.