Computer security and methods of use thereof
Described herein are various methods of securing a computer system. One or more methods include starting a security process after basic functionality on a computer is initiated at startup. The security process performs one or more reviews, such as audits, of the computer to verify that there have not been unauthorized changes to the computer, such as to any settings or executable files.
1 . A method of securing a computing device comprising steps of:
executing a kernel on the computing device, wherein the kernel initiates basic functionality for the computing device; and
executing a security process, wherein when the security process is initiated the kernel permits limited networking functionality for the computing device, wherein initiating executing the security process comprises steps of:
performing a first audit of a first configuration of the computing device;
generating an initial key based on the first audit;
performing a first comparison of the initial key and a previous key that was previously generated;
analyzing a timestamp to determine whether the security process is being run on a computer that has a security breach via analyzing the timestamp to determine if the security process is being told an incorrect date and time; and
initiating an enabled mode for the security process based on a result of analyzing the timestamp and as a result of the first comparison indicating there has not been a security breach, thereby enabling unlimited network communications between the computing device and other devices.
2 . The method of claim 1 , wherein the first configuration of the computing device comprises a first plurality of files on the computing device with executable instructions, and wherein the first configuration comprises at least a portion of the kernel.
3 . The method of claim 1 , wherein the first configuration of the computing device comprises a first plurality of files on the computing device with executable instructions.
4 . The method of claim 1 , wherein the first configuration comprises at least a portion of the kernel.
5 . The method of claim 1 , wherein during the enabled mode the security process further executes a step of mounting a hard drive.
6 . The method of claim 1 , wherein during the enabled mode the security process further executes a step of enabling new network connections to be opened.
7 . The method of claim 1 , wherein during the enabled mode the security process further executes a step of enabling functionality for at least one peripheral device coupled to the computing device.
8 . The method of claim 1 , wherein the first configuration comprises a plurality of settings and at least a portion of the kernel.
9 . The method of claim 1 , wherein during the enabled mode the security process further executes steps of:
enabling read and write access for a second process to a hard drive memory of the computing device;
generating a loop key;
performing a supplemental audit of a second configuration of the computing device;
generating a supplemental key based on the supplemental audit;
performing a second comparison of the supplemental key and the loop key;
disabling the enabled mode for the security process as a result of the second comparison of the supplemental key and the loop key indicating a security breach; and
continuing operating in the enabled mode as a result of the second comparison of the supplemental key and the loop key indicating there has not been a security breach.
10 . The method of claim 9 , wherein the second process is an operating system for the computing device.
11 . The method of claim 10 , wherein the second configuration comprises a list of processes being executed.
12 . A method of securing a computing device comprising steps of:
initiating an enabled mode for a security process, wherein when the security process is initiated a kernel permits limited networking functionality, wherein during the enabled mode the security process periodically executes steps of:
enabling a second process to access a hard drive memory of the computing device;
performing a first audit of a first configuration of the computing device;
generating a first key based on the first audit;
receiving a loop key;
performing a first comparison of the first key and the loop key;
analyzing a timestamp to determine whether the security process is being run on a computer that has a security breach via analyzing whether the timestamp is the correct time;
disabling the enabled mode for the security process as a result of at least one of the first comparison of the first key and the loop key and the analyzing the timestamp indicating a security breach; and
continuing operating in the enabled mode as a result of both of the first comparison of the first key and the loop key and the analyzing the timestamp indicating there has not been a security breach, thereby enabling unlimited network communications between the computing device and other devices.
13 . The method of claim 12 , wherein the second process comprises an operating system for the computing device, further comprising a step of executing the kernel on the computing device, wherein the kernel initiates basic functionality for the computing device.
14 . The method of claim 13 , wherein during the enabled mode the security process further executes a step of enabling new network connections to be opened, and wherein the first configuration comprises at least a portion of the kernel.
15 . The method of claim 13 , wherein during the enabled mode the security process further executes a step of enabling new network connections to be opened.
16 . The method of claim 13 , wherein the first configuration comprises at least a portion of the kernel.
17 . The method of claim 12 , wherein during the enabled mode the security process further executes a step of mounting a hard drive.
18 . A method of securing a computing device comprising steps of:
executing a security process, wherein when the security process is initiated a kernel permits limited networking functionality of only being permitted to open a single network connection, wherein executing the security process comprises steps of:
performing a first audit of a first configuration of the computing device;
generating an initial key based on the first audit;
analyzing a timestamp to determine whether the security process is being run on a computer that has a security breach via analyzing whether the timestamp indicates the incorrect time;
performing a first comparison of the initial key and a previous key that was previously generated; and
initiating an enabled mode for the security process as a result of both the first comparison and the analyzing the timestamp indicating there has not been a security breach, thereby enabling unlimited network communications between the computing device and other devices.
19 . The method of claim 18 , wherein during the enabled mode the security process further executes a step of enabling new network connections to be opened.
20 . The method of claim 18 , wherein during the enabled mode the security process further executes a step of enabling functionality for at least one peripheral device coupled to the computing device.