Deconflicting Malware Remediation Prompts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users are often prompted multiple times to confirm visiting potentially malicious websites due to overlapping safe-surfing policies enforced by device and network security monitors, leading to a suboptimal user experience and increased computational overhead from relying on centralized exception databases.
Innovation Solution
Implementing a system where acknowledgment information is passed between security monitors to deconflict prompts, allowing user choices to be synced between device and network security monitors without relying on centralized databases, thus preventing redundant prompts and enhancing user experience while reducing computational load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple security monitors (device and network) enforce safe-surfing policies independently, then security coverage is improved, but users are prompted multiple times to confirm visiting potentially malicious websites
Solution Approach 1:
The patent merges the safe-surfing policies of device and network security monitors by having them reference a shared exception list stored locally on the device. When the user authorizes access to a potentially malicious site, both monitors check the same local exception list, preventing duplicate prompts and synchronizing their behavior without requiring centralized database synchronization.
2Ease of operation
If centralized exception databases are used to synchronize user authorizations, then prompt deconfliction is improved, but computational overhead and network dependency increase
Solution Approach 1:
The patent extracts the exception list from centralized databases and stores it locally on the user's device. This allows both device and network security monitors to access and update the exception list locally, eliminating the need for continuous network communication and centralized database synchronization, thereby reducing computational overhead and network dependency.
3Speed
If device security monitor maintains local exception list, then access to authorization information is improved, but synchronization with network security monitor becomes challenging
Solution Approach 1:
The patent makes the local exception list serve multiple functions: it stores user authorizations for the device security monitor, provides reference data for the network security monitor, and acts as a synchronization mechanism itself. By updating the local exception list with authorized domains, both monitors automatically benefit from the same authorization state without requiring complex dedicated synchronization protocols.
Data Source
AI summary
Methods, apparatus, systems, and articles of manufacture to deconflict malware or content remediation are disclosed. An example apparatus includes at least one processor and memory including instructions that, when executed, cause the at least one processor to at least identify data to be encoded into a token, compute a hashed string based on the data to be encoded, determine a number of characters to be included in the token, select a subset of characters from the hashed string, and generate the token using the subset of characters from the hashed string.