Browser Protection via Instrumented Code Interception

The patent introduces a proxy server as an intermediary between the website and third-party code execution. The proxy server mediates all interactions by injecting instrumented code that monitors and controls third-party code behavior, allowing desirable functionalities while blocking malicious activities. The proxy acts as a gatekeeper that can suspend and resume code execution based on policy violations.

The patent segments the code execution environment into multiple isolated contexts: the original website code, the injected instrumented code, and the third-party code. Each operates in its own namespace with controlled access. The instrumented code is divided into monitoring components that track specific actions (data access, ad rendering, cookie creation) separately, enabling granular control over third-party code behavior.

The patent creates a universal proxy server framework that handles multiple security functions through a single unified system. The same proxy infrastructure performs code injection, instrumentation, monitoring, suspension, and policy enforcement across all third-party code regardless of source or type. This multi-functional approach consolidates complexity into one standardized component rather than requiring separate mechanisms for each security function.

The patent changes the execution state parameters of third-party code dynamically. The instrumented code monitors variables such as execution suspension status, policy violation flags, and monitoring mode. By altering these parameters based on detected behavior, the system can transition code between different execution states (normal execution, suspended, blocked) without fundamentally changing the code structure, managing complexity through state management rather than structural complexity.

The patent implements periodic monitoring and evaluation of third-party code execution. Instead of continuous suspension, the system periodically checks code behavior against security policies, suspending execution only when violations are detected. The instrumented code performs intermittent security assessments at designated checkpoints, allowing legitimate code to execute efficiently while maintaining security through periodic verification rather than constant interruption.

The patent applies preliminary anti-action by pre-configuring security policies and instrumented code before third-party code execution begins. The system pre-identifies potential malicious behaviors (data access patterns, ad rendering attempts, cookie creation) and prepares corresponding blocking actions. When such behaviors are detected, the pre-prepared anti-actions are immediately applied, reducing the need for prolonged suspension and resumption cycles, thereby maintaining productivity while ensuring security.