Browser Sandbox for Malicious Script Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies lack effective mechanisms to detect and prevent malicious code injected through client-side vectors in browsers, leading to unwanted actions such as redirects, data access, and cryptocurrency mining, compromising user privacy and e-commerce security.
Innovation Solution
A system and method that employs a protection script executed in the browser to detect, intercept, and prevent the execution of malicious code received from malicious client-side injection vectors, using behavioral sandboxes and interceptors to monitor and block unwanted actions, ensuring secure rendering of web content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If ads are allowed to run in the browser with full access to the first party domain, then the ads can perform intended actions like redirects to advertiser websites, but malicious code in those ads can perform unwanted actions such as non-user-initiated redirects and data access
Solution Approach 1:
The patent introduces a sandbox environment as an intermediary between the ad code and the browser's first party domain. The sandbox acts as a mediator that allows ad code to execute with limited permissions, preventing malicious code from accessing sensitive browser resources while still enabling legitimate ad functionality through controlled interactions.
Solution Approach 2:
The patent segments the browser environment into isolated contexts: a restricted sandbox environment for ad execution and the main browser environment for user operations. This segmentation separates ad code into its own isolated execution context, limiting its ability to perform unwanted actions while maintaining necessary ad functions within the sandbox boundaries.
2Reliability
If browser sandbox attributes and cryptographic service provider are used to restrict ad actions, then some control is achieved, but sophisticated malicious actors or malware can still bypass these restrictions
Solution Approach 1:
The patent applies preliminary action by pre-configuring the sandbox environment with restricted permissions before ad code execution. The sandbox attributes and security policies are established in advance, creating a fortified execution context that prevents sophisticated malware from bypassing restrictions through runtime manipulation or injection attacks.
3Reliability
If protection mechanisms are implemented to detect and block malicious code, then user and website owner control is enhanced, but device complexity and processing overhead increase
Solution Approach 1:
The patent implements self-service by enabling website owners to define their own ad policies through configurable parameters. The protection system automatically enforces these user-defined policies without requiring complex centralized management, allowing website owners to tailor security settings to their specific needs while reducing overall system complexity.
Data Source
AI summary
There are disclosed devices, system and methods for detecting malicious scripts received from malicious client side vectors. First, a script received from a client side injection vector and being displayed to a user in a published webpage is detected. The script may have malicious code configured to cause a browser unwanted action without user action. The script is wrapped in a java script (JS) closure and/or stripped of hyper-text markup language (HTML). The script is then executed in a browser sandbox that is capable of activating the unwanted action, displaying execution of the script, and stopping execution of the unwanted action if a security error resulting from the unwanted action is detected. When a security error results from this execution in the sandbox, executing the malicious code is discontinued, displaying the malicious code is discontinued, and execution of the unwanted action is stopped.