Browser Plug-in Phishing Detection via Local Cache Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for protecting web pages against phishing, such as relying on central lists of known counterfeit URLs, are inconvenient and prone to security loopholes due to the need for constant updates and potential delays in identifying newly created phishing pages.
Innovation Solution
A web page protection module integrated with a network access application, such as a browser plug-in, that allows users to request protection for web pages by caching legitimate pages and using similarity evaluating tests to identify potential counterfeit pages, including word count comparisons and form tests, to determine phishing likelihood and take protective actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a central list of known counterfeit URLs is maintained and periodically updated, then protection against known phishing pages is provided, but the system cannot detect newly created phishing pages and access time increases as the list grows
Solution Approach 1:
The patent applies preliminary action by caching legitimate web pages before phishing attempts occur. The system proactively stores authentic page content in a cache, enabling immediate comparison when users access similar URLs, thus eliminating the need to query a growing central list during each access and reducing access time while maintaining detection capability.
Solution Approach 2:
The patent segments the protection mechanism into two independent components: a static central list for known phishing URLs and a dynamic local cache of legitimate page content. This segmentation allows the system to handle known threats via the central list while using the local cache for rapid detection of new phishing attempts, thereby reducing access time for the majority of cases.
2Reliability
If a central list of counterfeit URLs is used, then protection against identified phishing pages is achieved, but users must constantly rely on browser vendor updates which may not include newly created phishing pages
Solution Approach 1:
The patent implements feedback by enabling users to report suspicious web pages directly to the system. When users encounter potential phishing pages, they can submit the URL for analysis. The system then compares the reported page against cached legitimate pages and updates its detection database, creating a continuous feedback loop that improves adaptability to new threats without requiring central vendor updates.
Solution Approach 2:
The patent applies self-service by allowing the system to automatically detect and respond to new phishing threats through user reports and automated comparison algorithms. The local caching mechanism enables the system to independently identify new phishing pages by comparing them against cached legitimate content, reducing reliance on external vendor updates and improving adaptability.
3Reliability
If the central list grows substantially to include more phishing URLs, then coverage of known threats increases, but access time becomes longer
Solution Approach 1:
The patent applies preliminary action by pre-caching legitimate web page content in local storage before phishing attempts occur. This allows the system to perform rapid local comparisons instead of querying an increasingly large central list during each web access, thereby maintaining high access speed while ensuring comprehensive threat coverage through the cached reference material.
Data Source
AI summary
Some embodiments of a method and apparatus for protecting web pages against phishing have been presented. In one embodiment, a user interface control is created at a client machine. A user may submit a request to protect a web page via the user interface control. In response to the request, a web page protection module may protect the web page against phishing based on content of the web page. In some embodiments, the web page protection module may be integrated with a network access application, such as, for example, as a plug-in to a browser.