Browser Response Screening for Sensitive GenAI Content
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing GenAI scanning services fail to detect sensitive data in web application responses due to content alteration during rendering, allowing malicious content to expose proprietary or confidential information.
Innovation Solution
Implement a system with a Web Application Firewall (WAF) that inserts detection code into responses containing GenAI content, monitors for GenAI elements, obscures rendered content, and scans the obscured content for sensitive data using a GenAI response protector.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If GenAI content is rendered in the browser, then the content becomes visible and usable to users, but sensitive data may be exposed during rendering
Solution Approach 1:
The WAF inserts detection code into the web application response before it reaches the browser, performing preliminary scanning of the rendered content. This allows sensitive data to be detected and blocked before actual exposure occurs, while still enabling legitimate content to render normally for users.
Solution Approach 2:
A detection code acts as an intermediary between the GenAI content and the browser rendering process. This intermediary monitors the rendering process, identifies sensitive data patterns, and can prevent exposure without blocking the entire content delivery.
2Reliability
If detection code is inserted into web application responses, then sensitive data can be detected, but the system complexity increases
Solution Approach 1:
The WAF is enhanced to perform multiple functions: traditional web application firewall operations plus GenAI content detection. By making the WAF multi-functional, the patent avoids adding separate dedicated detection systems, thereby limiting the increase in overall system complexity while maintaining reliable detection capabilities.
3Reliability
If real-time scanning of rendered content is performed, then sensitive data exposure is prevented, but processing time increases
Solution Approach 1:
The detection code scans for sensitive data patterns during the rendering process itself, before the content is fully delivered to the user. This preliminary detection approach prevents the need for additional post-rendering scanning steps, minimizing time loss while maintaining security.
Solution Approach 2:
The detection code uses pattern matching and heuristic analysis to quickly identify sensitive data patterns without performing exhaustive analysis on every piece of content. This allows the system to rush through the scanning process efficiently, preventing exposure while minimizing processing delays.
Data Source
AI summary
A method for avoiding exposure of sensitive data in a web application running in a browser due to rendering content generated by a generative artificial intelligence platform (“GenAI content”). A Web Application Firewall or Gateway (“WAF”) receives, from a web application, a first response to forward to the browser. The WAF modifies the first response by inserting detection code that causes the browser to: obscure a rendered version of the GenAI content in a first browser window, render the GenAI content in a second browser window that is not visible, convert the rendered GenAI content in the second browser window to an image, obtain an assessment from a sensitive data scanning engine on whether the image contains sensitive data, and based on the assessment, determine whether to unobscure the rendered version of the GenAI content in the first browser window. The WAF sends the modified response to the browser.