Browser Injection Blocker for Client-Side HTML Attack Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing anti HTML injection techniques are ineffective in protecting against direct HTML injection attacks from the client side, leaving web pages vulnerable to malicious access and data manipulation.
Innovation Solution
An apparatus and method that includes an access monitor, a document-object acquisition detector, and an injection blocker to monitor and block malicious access to a browser by detecting and comparing program interactions with the DOM interface, using a program list to selectively allow or deny access based on interface IDs and predetermined permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an agent system is installed on the server to detect and trace trespassers using HTTP header information, then the ability to trace and prevent server-side HTML injection is improved, but the availability of the server deteriorates due to the heavy monitoring and processing load
Solution Approach 1:
The patent introduces an intermediary component that sits between the client browser and the server, handling the monitoring and detection of HTML injection attempts. This intermediary captures HTTP header information and document object acquisition events without requiring the server to perform heavy analysis, thus protecting the server while maintaining security monitoring capabilities.
Solution Approach 2:
The system performs preliminary detection and blocking of HTML injection attempts at the client side before the malicious requests reach the server. By detecting document object acquisition and analyzing HTTP header information in advance, the system prevents harmful requests from consuming server resources, thereby maintaining server availability while ensuring security.
2Reliability
If existing anti HTML injection techniques are implemented on the server side, then server-side attacks are prevented, but client-side HTML injection attacks cannot be blocked
Solution Approach 1:
The patent shifts the security monitoring dimension from purely server-side to client-side by implementing detection mechanisms within the browser environment. It monitors document object acquisition events and analyzes HTTP header information at the client level, creating a new dimension of security protection that complements traditional server-side defenses and effectively blocks client-side HTML injection attacks.
3Measurement precision
If comprehensive monitoring of program access to browser is implemented, then detection precision of malicious access is improved, but device complexity increases due to additional monitoring components and processing
Solution Approach 1:
The patent extracts specific critical indicators for detecting malicious access, namely document object acquisition events and HTTP header information, rather than monitoring all possible program activities. By focusing on these key extraction points, the system achieves high detection precision while avoiding the complexity of comprehensive full-system monitoring.
Data Source
AI summary
An apparatus for blocking an external access to a browser includes an access monitor for monitoring whether a program is accessing the browser; and a document-object acquisition detector for detecting whether the program detected to access the browser by the access monitor acquires a document object of the browser; and an injection blocker for blocking the access of the program to the browser when the document object acquisition detector detects the document object acquisition by the corresponding program.