Code Library Detection for Web Security Latency

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Automated cyber-attacks on web applications are increasing, and existing security countermeasures often slow down operations, leading to unacceptable latency, making it crucial to enhance defense efficiency without compromising user experience.

Innovation Solution

The system detects specific blocks of code within source code, such as known libraries or previously processed code, and excludes them from processing to reduce latency, generating polymorphic transformations that impede automated attacks while maintaining web page functionality and user experience.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security countermeasures are implemented to detect and process source code for automated attack prevention, then defense efficiency against cyber-attacks is improved, but processing latency increases and user experience deteriorates

Engineering Contradiction:

Improvedefense efficiencyVSAvoidprocessing latency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system pre-computes and stores hash values of known malicious code patterns in a database before runtime. During source code processing, the system performs quick hash comparisons against the pre-stored database rather than performing full pattern matching, significantly reducing processing latency while maintaining defense efficiency

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system extracts and processes only specific portions of source code that are suspected of containing malicious patterns, rather than processing the entire codebase. By identifying and isolating relevant code segments through targeted hashing and comparison, the system reduces the volume of data requiring intensive security analysis, thereby minimizing latency

Inventive Principle:

Principle #2Taking out (Extraction)

2Reliability

If comprehensive source code processing is performed to ensure security, then attack detection capability is improved, but computational resource consumption increases

Engineering Contradiction:

Improveattack detection capabilityVSAvoidcomputational resource consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The source code processing is divided into multiple segments: first generating a hash of the entire source code, then selectively comparing only relevant portions against the malicious code database. This segmentation allows the system to avoid processing entire large codebases when only small portions need security checking, reducing computational resource consumption while maintaining detection capability

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system creates hash copies of source code and malicious patterns for comparison purposes, rather than directly processing and analyzing the full original code. These hash representations consume minimal computational resources while preserving the essential characteristics needed for attack detection

Inventive Principle:

Principle #26Copying

Data Source

PatentUS9405910B2Automatic library detection

Publication Date: 2016.08.02 SHAPE SECURITY INC

AI summary

The automated, real-time detection of specific blocks of code within a larger body of source code is described. Specific implementations relate to the detection of known code libraries in web page code to improve the efficiency of the generation of polymorphic transformations of the web page code for the purpose of impeding automated cyber-attacks.