Write Access Control for Storage Media
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing anti-virus programs are ineffective in preventing computer infections by viruses, as they often operate after the operating system is infected and struggle to identify new variants quickly enough.
Innovation Solution
A method that monitors applications attempting to write data to a storage medium, interrogates a rules database to control write access, and prompts the user to allow or block access based on predefined levels, ensuring only trusted applications can write to the medium.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If traditional anti-virus programs are used to detect and combat viruses, then virus detection capability is improved, but response time is too slow to prevent new virus variants from infecting the system
Solution Approach 1:
The system performs preliminary action by monitoring and controlling write access to the storage medium before viruses can infect the system. The write access monitoring component continuously observes application attempts to write data, and the write access controlling component prevents unauthorized writes in advance, stopping viruses at the source rather than detecting them after infection occurs.
Solution Approach 2:
The patent introduces intermediary components between applications and the storage medium. The write access monitoring component acts as an intermediary that intercepts write operations, checks them against security rules, and the write access controlling component mediates whether to allow or block the write operation, preventing direct unauthorized access to the storage medium.
2Ease of operation
If write access to storage medium is unrestricted to maintain system functionality, then ease of operation is improved, but virus propagation risk increases
Solution Approach 1:
The system applies local quality by implementing selective write access control rather than universal restriction. Different applications receive different write access permissions based on their trust level and requirements. Legitimate applications can write to the storage medium when needed, while malicious applications are blocked, achieving both functionality and security through localized permission management.
Solution Approach 2:
The system changes the parameter of write access from unrestricted to controlled based on monitoring results. The write access controlling component dynamically adjusts write permissions by blocking or allowing write operations based on real-time monitoring of application behavior and stored security rules, transforming the static permission model into a dynamic security mechanism.
Data Source
AI summary
The present invention relates to a method and system of controlling the writing of data to a computer storage medium such as a hard drive in a computer system in order to prevent viruses or similar program code from being saved on such medium. Upon the computer system initiating a request to write data to the medium, the application embodying the method and system checks the identity of the running application requesting to perform the write. The method and system then checks a rule database to determine if such requesting application has permission to write to the medium. The system can also check that the data file type that the application seeks to write is a permitted type for that application. In response to the output of the database check, the requested write is allowed to proceed or is blocked. In the absence of a rule, the system presents the request to the computer user. The user can either grant permission or block, and such response can be included in the rule database. User responses can be collected from many instances of the invention and the collective response of users presented to a user.