Computing environment and apparatuses with integrity based fail over

• US 20040059930A1
• Filed: 09/19/2002
• Published: 03/25/2004
• Est. Priority Date: 09/19/2002
• Status: Active Grant

• Current Assignee: Tripwire Incorporated (Belden Inc.)
• Original Assignee: ORIX Growth Capital, LLC (ORIX Corporation)
• Inventors: DiFalco, Robert A., Good, Thomas E., Kim, Gene Ho
• Granted Patent: US 7,360,099 B2
• Time in Patent Office: Days
• US Class Current: 713/194
• CPC Class Codes: G06F 21/562 Static detection
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

Computing units of a computing environment are equipped with means to determine their respective integrity. Further, each computing unit is equipped, such that if its integrity is determined to have been compromised, the computing unit automatically takes itself out of service. In one embodiment, prior to the automatically removing itself from service, a degree of compromise is determined. If the degree of compromise is determined to be within an acceptable risk level, the compromised computing unit fails itself over to one or more other computing units in the computing environment.

Claims

1. In a computing environment having a plurality of computing units, a method of operation comprising:

determining whether integrity of a first of the computing units of the computing environment has been compromised; and

determining a degree of compromise, if the first computing unit is determined to have been compromised; and

failing the first computing unit over to one or more of the other computing units, if the degree of compromise is determined to be below a predetermined threshold.

2. The method of claim 1, wherein said determining of whether integrity of a first of the computing units of the computing environment has been compromised is performed regularly on a periodic basis.

3. The method of claim 1, wherein said determining of whether integrity of a first of the computing units of the computing environment has been compromised is performed continuously.

4. The method of claim 1, wherein said determining of whether integrity of a first of the computing units of the computing environment has been compromised comprises verifying a privileged kernel of an operating system of the first computing unit has not been compromised.

5. The method of claim 1, wherein said determining of whether integrity of a first of the computing units of the computing environment has been compromised further comprises verifying other privileged software of the first computing unit has not been compromised.

6. The method of claim 5, wherein said determining of whether integrity of a first of the computing units of the computing environment has been compromised further comprises verifying shared non-privileged software of the first computing unit has not been compromised.

7. The method of claim 6, wherein said determining of whether integrity of a first of the computing units of the computing environment has been compromised further comprises verifying non-shared and non-privileged software of the first computing unit has not been compromised.

8. The method of claim 1, wherein said determining of whether integrity of a first of the computing units of the computing environment has been compromised comprises verifying certain designated system data of the first computing unit has not been compromised.

9. The method of claim 1, wherein said determining of a degree of compromise comprises determining whether any software of the first computing unit with an integrity classification greater than a predetermined level has been compromised.

10. The method of claim 1, wherein said failing of the first computing unit over to one or more of the remaining computing units comprises automatically relocating one or more user sessions being hosted on the first computing unit to one or more of the remaining computing units.

11. The method of claim 10, wherein said failing over further comprises automatically taking the first computing unit out of service, upon relocating the one or more user sessions being hosted by the first computing unit to one or more of the remaining computing units.

12. The method of claim 1, wherein the method further comprises automatically taking the first computing unit out of service.

13. A computing apparatus comprising:

storage medium having stored therein a plurality of programming instructions designed to

determine whether integrity of the computing apparatus has been compromised,

determine a degree of compromise, if it is determined that the integrity of the computing apparatus has been compromised; and

automatically failing the computing apparatus over to one or more of companion computing apparatuses, if the degree of compromise is determined to be below a predetermined threshold; and

a processor coupled to the storage medium to execute the programming instructions.

14. The computing apparatus of claim 13, wherein said programming instructions are executed to perform said determining of whether integrity of the computing apparatus has been compromised regularly, on a periodic basis.

15. The computing apparatus of claim 13, wherein said programming instructions are executed to perform said determining of whether integrity of a first of the computing units of the computing has been compromised continuously.

16. The computing apparatus of claim 14, wherein said programming instructions are executed to perform said determining of whether integrity of the computing apparatus has been compromised by verifying a privileged kernel of an operating system of the computing apparatus has not been compromised.

17. The computing apparatus of claim 16, wherein said programming instructions are further executed to perform said determining of whether integrity of the computing apparatus has been compromised by verifying other non-operating system kernel privileged software of the computing apparatus has not been compromised.

18. The computing apparatus of claim 17, wherein said programming instructions are designed to further perform said determining of whether integrity of the computing apparatus has been compromised by verifying shared non-privileged software has not been compromised.

19. The computing apparatus of claim 18, wherein said programming instructions are designed to further perform said determining of whether integrity of the computing apparatus has been compromised by verifying other non-shared and non-privileged software has not been compromised.

20. The computing apparatus of claim 13, wherein said programming instructions are designed to perform said determining of whether integrity of the computing apparatus has been compromised by verifying certain designated system data of the computing apparatus has not been compromised.

21. The computing apparatus of claim 13, wherein said programming instructions are designed to perform said determining of a degree of compromise by determining whether any software of the computing apparatus with an integrity classification greater than a predetermined level has been compromised.

22. The computing apparatus of claim 13, wherein said programming instructions are designed to perform said failing of the computing apparatus over to one or more of companion computing apparatuses by automatically relocating one or more user sessions being hosted on the computing apparatus to the one or more companion computing apparatuses.

23. The computing apparatus of claim 22, wherein said programming instructions are designed to perform said failing over by further automatically taking the computing apparatus out of service, upon relocating the one or more user sessions being hosted by the computing apparatus to the one or more companion computing apparatuses.

24. The computing apparatus of claim 13, wherein the programming instructions are further designed to automatically take the computing apparatus out of service

25. An apparatus comprising:

means for determining whether integrity of the apparatus has been compromised;

means for determining a degree of compromise, if it is determined that the integrity of the apparatus has been compromised, and

means for failing the apparatus over to one or more companion apparatuses, if the degree of compromise is determined to be below a predetermined threshold.

26. A computing environment, comprising

a first computing unit equipped to regularly determine whether its integrity has been compromised, and upon determining its integrity has been compromised, determine a degree of compromise, and failing itself over to at least a second computing unit, if the degree of compromise is determined to be below a predetermined threshold;

and

the second computing unit, with the second computing unit being also equipped to regularly determine whether its integrity has been compromised, and upon determining its integrity has been compromised, determine a degree of compromise, and failing itself over to at least the first computing unit, if the degree of compromise is determined to be below a predetermined threshold.