Browser Sensor Runtime Detection for Client-Side Web Attacks

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing attack-prevention techniques primarily focus on the server side, leaving client-side vulnerabilities exposed to malicious users, particularly DOM-based cross-site scripting (XSS), which can lead to session-stealing and credit card information theft, among other threats.

Innovation Solution

A client-side sensor, implemented as JavaScript code within web applications, actively monitors and detects client-side attacks by checking application-specific rules and sending data to a server for real-time analysis, utilizing machine-learning algorithms to identify anomalies.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If attack prevention techniques focus on the server side, then server security is improved, but client-side vulnerabilities remain exposed to attacks

Engineering Contradiction:

Improveserver securityVSAvoidclient-side vulnerabilities

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The security system is segmented into server-side prevention mechanisms and client-side detection mechanisms. The sensor component runs independently in the user's browser, separating the detection function from the server infrastructure, allowing simultaneous protection at both levels without interference

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A sensor acts as an intermediary between the web application and the attacker. This sensor collects data about application behavior and communicates it to analysts, serving as a middle layer that detects attacks before they can exploit client-side vulnerabilities

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If more code is executed on the client side in the browser, then application functionality and user accessibility are improved, but client-side attack surface increases

Engineering Contradiction:

Improveapplication functionalityVSAvoidclient-side attack surface

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The sensor is integrated into the web application code before deployment. It performs preliminary detection of attack patterns by monitoring application behavior in real-time, identifying malicious activities before they can compromise the increased client-side functionality

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The sensor establishes a feedback loop by continuously collecting data about application execution and user interactions, then communicating this information to security analysts. This feedback mechanism enables real-time detection of anomalies in the expanded client-side codebase

Inventive Principle:

Principle #23Feedback

Data Source

PatentEP3349137B1Client-side attack detection in web applications

Publication Date: 2026.03.11 SAP SE

Figure 1
Figure 2
Figure 3

AI summary

A client comprising a web browser is provided. The client is configured to: run an application in the web browser, the application comprising a sensor including sensor JavaScript code, wherein running the application comprises executing the sensor JavaScript code as the first JavaScript code in the web browser to activate the sensor; and wherein the sensor is configured to: gather data with respect to the application at runtime; and check predetermined application-specific rules against the gathered data for detecting client-side attacks at runtime.