Client-Side Code Rewrapping for CASB Proxy Load Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional CASB web proxies face performance bottlenecks due to the resource-intensive task of parsing, identifying, and rewriting code included in web pages, which can impact the ability to quickly deliver web pages as the service expands.
Innovation Solution
Implementing a system that enables client-side rewriting of code by interposing a proxy computing device between the client and server computing devices, where the proxy analyzes the web page, generates a modified version with a wrapped code component and a code rewriting and evaluation function, and sends this modified version to the client for execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the proxy computing device performs code parsing, identifying, and rewriting operations, then code modification and security policy enforcement are achieved, but the proxy computing device experiences resource consumption and performance bottlenecks
Solution Approach 1:
The patent extracts the code rewriting operation from the proxy computing device and relocates it to the client computing device. The proxy only performs analysis and generates a modified web page with a wrapped code component, while the client executes the actual rewriting through a provided code rewriting function, thereby reducing the proxy's computational burden and improving web page delivery speed while maintaining security policy enforcement capability
Solution Approach 2:
The patent introduces a wrapped code component as an intermediary between the proxy computing device and the client computing device. This wrapped code component contains a call to a code rewriting function and serves as the mechanism through which the proxy can enforce security policies without directly performing resource-intensive rewriting operations, thus resolving the contradiction between reliability and productivity
2Reliability
If the proxy computing device rewrites all code components in web pages, then comprehensive security evaluation is achieved, but computing resources are wasted on code that may never be evaluated
Solution Approach 1:
The patent applies partial action by only rewriting code components that are actually evaluated during web page execution. The wrapped code component is designed to call the rewriting function only when the associated event occurs (e.g., file upload, download, or navigation action), avoiding the waste of computing resources on code that would never be executed or evaluated, while still maintaining comprehensive security evaluation for all relevant code paths
Data Source
AI summary
Systems and methods are described for client-side rewriting of web page code. A proxy computing device receives a web page from a server computing device and analyzes the web page to identify a code component. The proxy computing device generates a modified version of the web page by replacing the identified code component with a wrapped code component and including a code rewriting and evaluation function in the web page. The wrapped code component includes a call to the code rewriting and evaluation function that includes the identified code component as an argument thereof. The code rewriting and evaluation function is configured to generate a rewritten code component by rewriting the identified code component and to evaluate the rewritten code component. The proxy computing device sends the modified version of the web page to a client computing device that is configured to load the modified version of the web page.