Runtime Advertising Code Scanning for Mobile Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Advertisements displayed on portable computing devices, generated using HTML and/or Javascript code, pose security risks as they can execute malicious actions, such as installing unwanted software or extracting personal information, without user consent.

Innovation Solution

Implanting program code in software projects during development to automatically detect, intercept, and scan advertising code for malicious content, and optionally block its display, using techniques like dynamic proxies, method swizzling, or WebView objects, ensuring user safety by preventing unauthorized actions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If advertising code is displayed within software applications on portable computing devices, then user engagement and revenue are improved, but security risks increase due to potential malicious content execution

Engineering Contradiction:
Improveuser engagementVSAvoidsecurity risks
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an intermediary scanning mechanism that sits between the advertising code delivery and execution. The scan function intercepts advertising code, scans it for malicious content using pattern matching and heuristics, and only allows safe code to execute. This mediator resolves the contradiction by enabling advertising display while blocking malicious content through the scanning intermediary layer.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If advertising code is intercepted and scanned for malicious content, then security is improved, but processing time and system resources are consumed

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The scanning mechanism applies partial action by not scanning all advertising code equally. Instead, it uses lightweight pattern matching for common malicious signatures first, then applies more resource-intensive heuristics only when needed. This selective scanning approach maintains security while minimizing processing time and resource consumption for benign advertising code.

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If program code is implanted in software projects during development to scan advertising code, then security protection is enhanced, but device memory and computational resources are consumed

Engineering Contradiction:
Improvesecurity protectionVSAvoiddevice memory
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent implements local quality by making the security scanning capability optional and configurable. Developers can choose to include or exclude the scan function based on their specific security needs. The program code is implanted in a modular way that allows selective activation, so devices that require high security get full protection while others can use minimal resources.

Inventive Principle:
Principle #3Local quality

4Measurement precision

If advertising code is wrapped with program code for scanning, then malicious content detection is improved, but code complexity and processing overhead increase

Engineering Contradiction:
Improvemalicious content detectionVSAvoidcode complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent uses nesting by embedding the scanning logic within the advertising code execution flow. The wrap function nests the scan call inside the existing advertising rendering pipeline, so the scanning capability is contained within the existing code structure rather than adding external complexity. This nested approach maintains detection precision while minimizing overall code complexity.

Inventive Principle:
Principle #7Nested doll (Nesting)

Data Source

PatentUS10467408B1Automatic security scanning of advertisements during runtime of software applications
Publication Date: 2019.11.05 FIVE MEDIA MARKETING LTD
  • US10467408B1 patent drawing
  • US10467408B1 patent drawing

AI summary

A method, system, and computer program product for security scanning of advertisements displayed inside software applications. First, it is automatically detected that the software application has received from a server, over a network, advertising code that is configured to display an advertisement within the software application. Then, the received advertising code is intercepted, and is wrapped with program code that is configured to: scan the advertising code for malicious content, and allow or prevent the display of the advertisement within the software application based on the scanning. Finally, the wrapped advertising code is delivered to the software application as if the wrapped advertising code was received directly from the server, such that, when the wrapped advertising code is executed in the software application: the advertising code is scanned, and the display of the advertisement is allowed or prevented based on the scanning.