DOM Integrity Validation via Copy Testing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The integration of third-party services in web pages poses security challenges due to malicious providers attempting to attack both the provider and end users, making it difficult for legitimate providers and users to trust content and functionality on the internet.
Innovation Solution
A system that includes a processor executing instructions to provide an integrity validation script to a browser application, which identifies and maintains a document object model (DOM) aspect by generating a copy and testing its integrity through attempted deletion, ensuring the DOM's integrity and preventing malicious actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If third-party services are integrated into web pages, then functionality and features are enhanced, but security risks increase due to malicious providers
Solution Approach 1:
The system performs preliminary integrity validation of the DOM environment before executing third-party service code. An integrity validation script is injected into the DOM and executed prior to service integration, checking whether critical DOM aspects have been tampered with. This preliminary check prevents malicious code from compromising the environment, allowing safe functionality enhancement while maintaining security.
Solution Approach 2:
The patent introduces an intermediary integrity validation mechanism between the web page provider and third-party services. This validator acts as a mediator that verifies the integrity of the DOM environment, ensuring that third-party services only execute in trustworthy contexts. The intermediary layer filters out malicious integrations while allowing legitimate functionality, resolving the contradiction between versatility and reliability.
2Reliability
If integrity validation is performed by copying and testing DOM aspects, then security is improved, but computational overhead increases
Solution Approach 1:
The system creates copies of critical DOM aspects (such as DOM methods, properties, and functions) to validate their integrity. By copying these elements rather than analyzing the entire DOM tree, the system achieves thorough security validation with minimal computational overhead. The copy operation is lightweight compared to full DOM analysis, maintaining reliability while controlling resource consumption.
Solution Approach 2:
The integrity validation focuses on specific local aspects of the DOM that are critical for security (such as key methods and properties) rather than validating the entire DOM structure. This localized approach applies quality validation only where necessary, reducing overall computational resources while maintaining effective security checks through targeted copying and testing of essential DOM elements.
Data Source
AI summary
An aspect identifier of an integrity validation script may be provided to a browser application, that, during execution thereof by the browser application when rendering a page, identifies a document object model (DOM) aspect of a DOM of the page. A copy generator of the integrity validation script may be provided to the browser application that, during execution thereof by the browser application when rendering the page, generates a copy of the identified DOM aspect. The integrity validation script is configured to test an integrity of the DOM based on attempted deletion of the identified DOM aspect, while maintaining the identified DOM aspect through the copy thereof.