System and method for securing data processing systems through recognition and analysis of commands

Patent metadata

Field	Value
Publication number	US-12452082-B2
Application number	US-202318309266-A
Country	US
Kind code	B2
Filing date	Apr 28, 2023
Priority date	Apr 28, 2023
Publication date	Oct 21, 2025
Grant date	Oct 21, 2025

Abstract

Methods and systems for securing data processing systems are disclosed. The data processing systems may be secured through analysis of recognition and simulation of commands that may be run on data processing systems. An analysis of recognition of the command may be used to query if the command has already been simulated for its effects on the data processing system. If the command may have already simulated the command, then the data processing system may know whether to execute the command. Conversely, if the command may not have been simulated, the command may be simulated to understand the effects on the data processing system. In understanding the effects of the command, the data processing system may formulate whether to execute the command.

First claim

What is claimed is:

1. A method for securing a deployment, the method comprising:
obtaining, by a data processing system of the deployment, a command; and
prior to implementing the command:
making a first determination regarding whether the command is from a trusted entity, and
in a first instance of the first determination where the command is from the trusted entity:
making a second determination regarding whether a pre-simulated scenario for the command and a corresponding resolution for the command is available;
in a first instance of the second determination where the pre-simulated scenario for the command and the corresponding resolution for the command is available:
implementing the command when the corresponding resolution indicates performance of the command, and
discarding the command without implementation when the corresponding resolution indicates that the command is to be ignored; and

in a second instance of the second determination where the pre-simulated scenario for the command and the corresponding resolution for the command are not available:
initiating performance of a simulated scenario for the command to obtain the corresponding resolution for the command,
implementing the command when the corresponding resolution indicates performance of the command, and
discarding the command without implementation when the corresponding resolution indicates that the command is to be ignored.

2. The method of claim 1 , further comprising:
in a second instance of the first determination where the command is not from the trusted entity:
discarding the command without implementation.

3. The method of claim 1 , wherein the pre-simulated scenario is based on a digital twin, and the corresponding resolution is based on an evaluation of operation of the digital twin under influence of the command.

4. The method of claim 3 , wherein the pre-simulated scenario and the corresponding resolution are obtained from a deployment manager that uses the digital twin to manage multiple data processing systems in the deployment.

5. The method of claim 1 , further comprising:
in the second instance of the second determination where the pre-simulated scenario for the command and the corresponding resolution for the command are not available:
adding the command to a buffer comprising commands to be implemented once the pre-simulated scenario for the commands and the corresponding resolutions are available.

6. The method of claim 5 , further comprising:
in the second instance of the second determination where the pre-simulated scenario for the command and the corresponding resolution for the command are not available:
identifying a time sensitivity level for implementation of the command; and
expediting the command based on the time sensitivity level obtainment of the corresponding resolution of the pre-simulated scenario.

7. The method of claim 6 , wherein expediting the obtainment comprises:
initiating review for the command by a subject matter expert to obtain an analysis of the command; and
obtaining the corresponding resolution based on the analysis of the command by the subject matter expert.

8. The method of claim 6 , wherein expediting the obtainment comprises:
prioritizing the performance of a simulated scenario for the command to obtain the corresponding resolution.

9. The method of claim 1 , wherein the operations further comprise:
in the second instance of the second determination where the pre-simulated scenario for the command and the corresponding resolution for the command are not available:
identifying a time sensitivity level for implementation of the command; and
expediting obtainment of the corresponding resolution of the pre-simulated scenario for the command based on the time sensitivity level.

10. A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for securing a deployment, the operations comprising:
obtaining, by a data processing system of the deployment, a command; and
prior to implementing the command:
making a first determination regarding whether the command is from a trusted entity, and
in a first instance of the first determination where the command is from the trusted entity:
making a second determination regarding whether a pre-simulated scenario for the command and a corresponding resolution for the command is available;
in a first instance of the second determination where the pre-simulated scenario for the command and the corresponding resolution for the command is available:
implementing the command when the corresponding resolution indicates performance of the command, and
discarding the command without implementation when the corresponding resolution indicates that the command is to be ignored; and

in a second instance of the second determination where the pre-simulated scenario for the command and the corresponding resolution for the command are not available:
initiating performance of a simulated scenario for the command to obtain the corresponding resolution for the command,
implementing the command when the corresponding resolution indicates performance of the command, and
discarding the command without implementation when the corresponding resolution indicates that the command is to be ignored.

11. The non-transitory machine-readable medium of claim 10 , wherein the operations further comprise:
in a second instance of the first determination where the command is not from the trusted entity:
discarding the command without implementation.

12. The non-transitory machine-readable medium of claim 10 , wherein the pre-simulated scenario is based on a digital twin, and the corresponding resolution is based on an evaluation of operation of the digital twin under influence of the command.

13. The non-transitory machine-readable medium of claim 12 , wherein the pre-simulated scenario and the corresponding resolution are obtained from a deployment manager that uses the digital twin to manage multiple data processing systems in the deployment.

14. The non-transitory machine-readable medium of claim 10 , wherein the operations further comprise:
in the second instance of the second determination where the pre-simulated scenario for the command and the corresponding resolution for the command are not available:
adding the command to a buffer comprising commands to be implemented once the pre-simulated scenario for the commands and the corresponding resolutions are available.

15. The non-transitory machine-readable medium of claim 14 , wherein the operations further comprise:
in the second instance of the second determination where the pre-simulated scenario for the command and the corresponding resolution for the command are not available:
identifying a time sensitivity level for implementation of the command; and
expediting the command based on the time sensitivity level obtainment of the corresponding resolution of the pre-simulated scenario.

16. A data processing system, comprising:
a processor; and
a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations for securing a deployment, the operations comprising:
obtaining, by a data processing system of the deployment, a command, and prior to implementing the command:
making a first determination regarding whether the command is from a trusted entity; and
in a first instance of the first determination where the command is from the trusted entity:
making a second dete

Assignees

• Dell Products Lp

Inventors

• Ezrielev Ofir
• Kushnir Tomer
• Balin Maxim

Classifications

• G06F8/65

  Updates (security arrangements therefor G06F21/57) · CPC title

• G06F21/629

  to features or functions of an application · CPC title

• G06F21/71

  to assure secure computing or processing of information · CPC title

• H04L9/3247 Primary

  involving digital signatures · CPC title

• G06F8/60 Primary

  Software deployment · CPC title