Masked key hopping
Methods, systems, and media for improving computer security and performance of security are disclosed. In one example, a computer security system comprises a key management monitor, and two key elements comprising a first key element and a second key element. The first key element is stored at a first location address within a computer memory and the second key element is stored at a second location address. The key management monitor is configured to determine or receive a time duration for performing a data dump of contents of the computer memory. In one example, the key management monitor is further configured to control a location of the first key element within the computer memory, wherein the location address of the first key element is changed within a time period that is less than the time duration for performing the data dump of contents of the computer memory.
1. A computer security system comprising:
a key management monitor, and two key elements comprising a first key element and a second key element, the first key element stored at a first location address within a computer memory and the second key element stored at a second location address, wherein the key management monitor is configured to:
determine a time duration for performing a transaction using the computer memory,
determine a periodic time interval for moving the first key element to a different location within the computer memory, wherein the determined periodic time interval is a time period that is less than the time duration for performing the transaction using the computer memory,
store the first key element, at a first point in time, at a first location within the computer memory, and
relocate, at a second point in time that is the determined periodic time interval after the first point in time, the first key element to a second location within the computer memory.
2. The computer security system of claim 1 , wherein the time period is less than the time duration for performing a data dump of contents of the computer memory between the first location address and the second location address.
3. The computer security system of claim 1 , wherein the time period is based on a distance between the first location address and the second location address, and wherein the distance between the first location address and the second location address is changed continuously on a random basis.
4. The computer security system of claim 3 , wherein the distance between the first location address and the second location address is changed continuously on a random basis, and wherein each distance and value is changed within a time period that is less than the time duration for performing a data dump of contents of the computer memory.
5. The computer security system of claim 1 , wherein the key management monitor is further configured to test an entropy of a system which includes the computer memory before a paradigm for controlling the location of the first key element within the computer memory is accepted for use.
6. The computer security system of claim 1 , wherein the two key elements includes a key shuffle index mask.
7. The computer security system of claim 1 , wherein the two key elements includes a memory location storing a changing memory address.
8. An computer security method comprising:
identifying two key elements, the two key elements including a first key element and a second key element, the first key element stored at a first location address and the second key element stored at a second location address within a computer memory;
determining a time duration for performing a transaction within a computer system which includes the computer memory;
determining a periodic time interval for moving the first key element to a different location within the computer memory, wherein the determined periodic time interval is a time period that is less than the time duration for performing the transaction using the computer memory;
storing the first key element, at a first point in time, at a first location within the computer memory; and
relocating, at a second point in time that is the determined periodic time interval after the first point in time, the first key element to a second location within the computer memory.
9. The computer security method of claim 8 , wherein the transaction includes performing a data dump of contents of the computer memory.
10. The computer security method of claim 9 , further comprising:
identifying the time period based on a distance between the first location address and the second location address; and
changing the distance between the respective location addresses continuously on a random basis.
11. The computer security method of claim 10 , further comprising:
changing the distance between the location addresses for each of the two key elements, and a value for each of the location addresses continuously on a random basis; and
changing each distance and value within a time period that is less than the time duration for performing the data dump of contents of the computer memory.
12. The computer security method of claim 11 , further comprising:
configuring a key monitor to test an entropy of the computer system which includes the computer memory before a paradigm for controlling the location of the at least one of the two key elements within the computer memory is accepted for use.
13. The computer security method of claim 8 , wherein the two key elements further include one or both of key shuffle index mask and a memory location storing a changing memory location address.
14. A non-transitory machine-readable medium including instructions that, when read by a machine in a computer security system, cause the machine to perform operations for a method comprising at least:
identifying two key elements, the two key elements including a first key element and a second key element, the first key element stored at a first location address and the second key element stored at a second location address within a computer memory;
determining a time duration for performing a transaction within a computer system which includes the computer memory;
determining a periodic time interval for moving the first key element to a different location within the computer memory, wherein the determined periodic time interval is a time period that is less than the time duration for performing the transaction using the computer memory,
storing the first key element, at a first point in time, at a first location within the computer memory; and
relocating, at a second point in time that is the determined periodic time interval after the first point in time, the first key element to a second location within the computer memory.
15. The medium of claim 14 , wherein the transaction includes performing a data dump of contents of the computer memory.
16. The medium of claim 15 , wherein the operations further comprise:
identifying the time period based on a distance between the first location address and the second location address; and
changing the distance between the respective location addresses at random or pseudo-random time intervals.
17. The medium of claim 16 , wherein the operations further comprise:
changing the distance between the location addresses for each of the two key elements, and a value for each of the location addresses continuously on a random basis; and
changing each distance and value within a time period that is less than the time du ration for performing the data dump of contents of the computer memory.
18. The medium of claim 17 , wherein the operations further comprise:
configuring a key monitor to test an entropy of the computer system which includes the computer memory before a paradigm for controlling the location of the at least one of the two key elements within the computer memory is accepted for use.
19. The medium of claim 14 , wherein the two key elements further include one or both of a key shuffle index mask and a memory location storing a changing memory location addresses.
20. The medium of claim 14 , wherein the two key elements comprise a key and a key mask, and operations further comprising storing a key shuffle index, a key shuffle index mask, and a memory location storing a changing memory.