Workload Recording for Automated Security Testing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The complexity of modern computing systems makes security testing difficult and nearly impossible to obtain with certainty, highlighting the need for a simple, streamlined, and automated method for security testing.
Innovation Solution
A method, system, and computer program product that allows a computing device to access and record a current workload, save it into a computer workload accessible format, and later recreate the workload for security testing, either in its original form or with modified environmental variables.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If manual testing of complex computing systems is performed, then security testing can be conducted, but the process becomes difficult and time-consuming due to system complexity
Solution Approach 1:
The patent creates a virtual copy of the computing system's workload state that can be replicated for security testing without affecting the original system. This copy includes process information, memory state, and system configuration, allowing automated security tests to be performed repeatedly on identical conditions without manual intervention in the complex live system.
Solution Approach 2:
The system performs preliminary recording of the current workload state into a reproducible format before security testing begins. This preliminary action captures all necessary system state information in advance, so that when security testing is needed, the system can be quickly restored to the recorded state without manual configuration, enabling automated testing procedures.
2Reliability
If security testing is performed on the live computing system, then security vulnerabilities can be identified, but system stability and uninterrupted services are compromised
Solution Approach 1:
Instead of testing the live system directly, the patent creates a virtual replica of the system state that can be tested independently. The recorded workload information is loaded into a virtual environment for security testing, so that any testing activities, potential crashes, or system instability occur only in the virtual copy, not in the production system that provides uninterrupted services.
Solution Approach 2:
The patent segments the testing function from the production system by creating a separate virtual environment. The recorded workload state is loaded into this isolated virtual space where security testing can be performed without affecting the live system. This segmentation allows testing activities to be contained within the virtual boundary, protecting system stability and service continuity.
3Productivity
If the current workload state is recorded and replicated, then automated security testing becomes possible, but additional storage and processing requirements are introduced
Solution Approach 1:
The system performs preliminary recording of the current workload state into a compressed reproducible format. This preliminary action captures essential process information, memory state, and configuration data in an optimized form that minimizes storage requirements while maintaining full reproducibility. The recorded state can then be quickly loaded and tested multiple times without requiring additional storage for each test iteration.
Solution Approach 2:
The recorded workload format serves multiple functions: it represents the system state for recording, provides the basis for replication, enables automated security testing, and can be modified for different testing scenarios. This multi-functionality reduces the need for separate storage structures for each purpose, optimizing the overall storage and processing requirements while maintaining high testing efficiency.
Data Source
AI summary
A computing device accesses a current workload. The computing device saves the current workload into a computer workload accessible format, the computer workload accessible format usable for replicating the current workload. Security testing may be performed using the computer workload accessible format.