Cross-Network Document Access Control for Malware Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer networks, such as local area networks, are vulnerable to malicious attacks due to lower security settings when accessing resources from within the network compared to external networks, leading to potential malware spread and data breaches.
Innovation Solution
A computer security method that detects access to computer-readable documents from external networks, identifies references to local resources, and prevents access to those resources within the network to mitigate potential threats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If default security settings are used for ease of operation, then ease of operation is improved, but network security deteriorates
Solution Approach 1:
The security system performs preliminary actions by detecting and analyzing references to local resources within external documents before allowing access. The system proactively identifies potential security threats by examining document content, URLs, and embedded references, and takes preventive measures by blocking access to suspicious local resources before exploitation can occur.
Solution Approach 2:
The security system acts as an intermediary between external documents and local network resources. It intercepts and analyzes references from external documents to local resources, examining whether the references are legitimate or malicious. This intermediary layer allows the system to enforce security policies without requiring changes to default security settings or user behavior.
2Reliability
If security checks are performed on external documents, then network security is improved, but device complexity increases
Solution Approach 1:
The security system applies local quality by performing security checks specifically on references within external documents that point to local resources, rather than uniformly checking all document access. The system focuses its analysis on the specific problematic area (references to local resources) while allowing other document access to proceed with standard security protocols.
Solution Approach 2:
The system changes parameters by dynamically adjusting security inspection depth and scope based on the document type, source reliability, and reference patterns detected. Rather than applying a fixed complex security protocol to all documents, the system adapts its inspection parameters to the specific context, reducing unnecessary complexity while maintaining security.
3Reliability
If access to local resources is restricted from external documents, then network security is improved, but adaptability deteriorates
Solution Approach 1:
The security system implements dynamics by making access decisions flexible and context-dependent rather than applying rigid restrictions. The system dynamically evaluates each reference based on multiple factors including document source reputation, user permissions, resource sensitivity, and reference patterns, allowing legitimate access while blocking malicious references.
Solution Approach 2:
The system employs feedback mechanisms by monitoring access patterns and security events to continuously improve its detection capabilities. When legitimate uses of external document references are blocked, the system can learn from this feedback and adjust its policies to allow such legitimate access in the future, while maintaining security against malicious references.
Data Source
AI summary
A computer security method including detecting access, by a computer in a first computer network, to a computer-readable document, determining whether the computer-readable document was retrieved from a second computer network, identifying a reference, associated with the computer-readable document, to a resource at a location within the first computer network, and preventing access by the computer to the resource at the location within the first computer network responsive to determining that the computer-readable document was retrieved from the second computer network.