Browser Protection Module via Source-to-Source Code Transformation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Browser software vulnerabilities, particularly in HTML and script codes, are not adequately addressed by existing technologies, leading to increased risk of attacks due to delayed patch installations, with users remaining vulnerable for weeks or months.
Innovation Solution
A browser protection module that employs source-to-source translation to transform unsafe HTML and script code into safe versions, creating an isolation layer to prevent access to underlying resources, and introduces virtualization techniques to detect and prevent malicious actions, thereby enhancing browser security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If patches for browser vulnerabilities are installed quickly, then security reliability is improved, but installation time and system complexity increase
Solution Approach 1:
The patent applies preliminary action by transforming HTML and script code into safe versions before they are executed in the browser. The code transformation process occurs in advance, converting potentially vulnerable code into equivalent safe code that achieves the same functionality without security risks. This eliminates the need for users to wait for security patches, as protection is provided proactively through code transformation.
Solution Approach 2:
The patent introduces an intermediary code transformation system that acts as a mediator between the original potentially vulnerable code and the browser execution environment. This intermediary component transforms the code before execution, providing a security layer without requiring direct modification of the browser itself or waiting for official patches.
2Reliability
If code transformation is applied to all HTML and script code, then security coverage is improved, but processing time and computational resources increase
Solution Approach 1:
The patent applies partial action by focusing code transformation only on HTML and script code that contains security vulnerabilities, rather than transforming all code universally. The system identifies and transforms specific vulnerable code patterns while leaving safe code unchanged, providing comprehensive security coverage for critical areas while minimizing unnecessary processing overhead on already-safe code.
3Reliability
If an isolation layer is created to prevent access to underlying resources, then security protection is improved, but system complexity and performance overhead increase
Solution Approach 1:
The patent extracts the security protection logic from the core browser execution path by creating a separate code transformation layer. The transformation system operates independently, converting vulnerable code into safe code before execution, thereby isolating the security functionality from the main browser architecture. This reduces the complexity burden on the core browser system while maintaining comprehensive security protection.
Data Source
AI summary
An exemplary computer-implementable method (300) transforms information to reduce or eliminate risk of exploitation of a software service and includes receiving information (304) in response to a request, transforming the information (308) to produce transformed information and sending the transformed information (312). An exemplary firewall server (112) includes server software (144, 148) that allows the firewall server (112) to receive information from a resource (104, 108) via a network and to send information to a client computer (114) and a browser protection component (264, 268) for transforming the information to prevent exploitation of a vulnerability of browser software (154) on the client computer (114). Various other exemplary methods, devices, systems, etc., are also disclosed.