Runtime Advertising Code Scanning for Mobile Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Advertisements displayed on portable computing devices, generated using HTML and/or Javascript code, pose security risks as they can execute malicious actions, such as installing unwanted software or extracting personal information, without user consent.
Innovation Solution
Implanting program code in software projects during development to automatically detect, intercept, and scan advertising code for malicious content, and optionally block its display, using techniques like dynamic proxies, method swizzling, or WebView objects, ensuring user safety by preventing unauthorized actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If advertising code is displayed within software applications on portable computing devices, then user engagement and revenue are improved, but security risks increase due to potential malicious content execution
Solution Approach 1:
The patent introduces an intermediary scanning mechanism that sits between the advertising code delivery and execution. The scan function intercepts advertising code, scans it for malicious content using pattern matching and heuristics, and only allows safe code to execute. This mediator resolves the contradiction by enabling advertising display while blocking malicious content through the scanning intermediary layer.
2Reliability
If advertising code is intercepted and scanned for malicious content, then security is improved, but processing time and system resources are consumed
Solution Approach 1:
The scanning mechanism applies partial action by not scanning all advertising code equally. Instead, it uses lightweight pattern matching for common malicious signatures first, then applies more resource-intensive heuristics only when needed. This selective scanning approach maintains security while minimizing processing time and resource consumption for benign advertising code.
3Reliability
If program code is implanted in software projects during development to scan advertising code, then security protection is enhanced, but device memory and computational resources are consumed
Solution Approach 1:
The patent implements local quality by making the security scanning capability optional and configurable. Developers can choose to include or exclude the scan function based on their specific security needs. The program code is implanted in a modular way that allows selective activation, so devices that require high security get full protection while others can use minimal resources.
4Measurement precision
If advertising code is wrapped with program code for scanning, then malicious content detection is improved, but code complexity and processing overhead increase
Solution Approach 1:
The patent uses nesting by embedding the scanning logic within the advertising code execution flow. The wrap function nests the scan call inside the existing advertising rendering pipeline, so the scanning capability is contained within the existing code structure rather than adding external complexity. This nested approach maintains detection precision while minimizing overall code complexity.
Data Source
AI summary
A method, system, and computer program product for security scanning of advertisements displayed inside software applications. First, it is automatically detected that the software application has received from a server, over a network, advertising code that is configured to display an advertisement within the software application. Then, the received advertising code is intercepted, and is wrapped with program code that is configured to: scan the advertising code for malicious content, and allow or prevent the display of the advertisement within the software application based on the scanning. Finally, the wrapped advertising code is delivered to the software application as if the wrapped advertising code was received directly from the server, such that, when the wrapped advertising code is executed in the software application: the advertising code is scanned, and the display of the advertisement is allowed or prevented based on the scanning.

