Systems and methods for protecting customer secrets during vendor troubleshooting

Abstract

Systems, methods, and computer products for protecting information during troubleshooting are provided. A dumping mechanism includes marking at least one of a plurality of memory regions in the computer-readable medium as non-dumpable, initiating a core dump, determining which memory regions of the plurality regions are non-dumpable, and dumping the contents only of memory regions not marked as non-dumpable.

1 . A method for protecting information in a data processing system, said data processing system having a memory, said method comprising:
 marking at least one region in the memory as having non-dumpable content;   locating, when a data processing system fault is detected, the at least one region in the memory marked as having non-dumpable content;   protecting the non-dumpable content from dumping; and   dumping content from at least a second region in the memory for troubleshooting, said second region in the memory not being marked as having non-dumpable content.   
   
   
       2 . The method of  claim 1 , wherein marking comprises calling a marking method of a kernel application program interface (API). 
   
   
       3 . The method of  claim 1 , wherein marking comprises marking a memory region as non-dumpable when the memory region is allocated. 
   
   
       4 . The method of  claim 1 , wherein marking comprises marking memory regions associated with a transaction as non-dumpable when the memory regions are allocated. 
   
   
       5 . The method of  claim 1 , wherein marking comprises marking an object as non-dumpable and marking all memory used by the object as non-dumpable. 
   
   
       6 . The method of  claim 1 , wherein the data processing system is a proxy. 
   
   
       7 . The method of  claim 6 , wherein marking comprises marking at least one memory region that stores data associated with network traffic through the proxy. 
   
   
       8 . The method of  claim 7 , wherein the data associated with network traffic is decrypted data of an HTTPS transfer. 
   
   
       9 . The method of  claim 1 , wherein the data processing system fault is a shutdown event. 
   
   
       10 . The method of  claim 1 , further comprising encrypting the non-dumpable content and dumping the encrypted non-dumpable content.