Dynamic Fingerprint Signatures for Malicious Web Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing threat protection software fails to detect and protect against the misuse of browser and device fingerprint codes in malicious web pages, allowing cybercriminals to reuse stolen fingerprint code for cloaking and bypassing authentication checks.
Innovation Solution
Systems and methods for dynamically generating fingerprint signatures by detecting fingerprinting functions, associating them with corresponding actions, identifying callee information, and calculating cryptographic hashes to generate precise fingerprint signatures, thereby protecting against malicious activities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If traditional threat protection software is used, then basic security protection is provided, but detection of malicious fingerprinting code reuse is not achieved
Solution Approach 1:
The patent segments the fingerprinting detection process into distinct components: fingerprint data collection, function call tracking, signature generation, and malicious activity detection. This modular approach enables precise detection of fingerprint code reuse while maintaining manageable system complexity through organized, separable detection modules.
Solution Approach 2:
The system performs preliminary actions by proactively collecting fingerprint data and generating signatures before malicious activities occur. By pre-establishing a database of legitimate fingerprint signatures and monitoring for deviations, the system detects code reuse attempts before they can cause harm, improving detection precision without requiring complex real-time analysis.
2Reliability
If fingerprinting functions are monitored and analyzed, then detection of malicious web pages is improved, but processing time and computational resources increase
Solution Approach 1:
The patent creates simplified copies of fingerprint data in the form of cryptographic signatures and hashes. Instead of analyzing complete fingerprint datasets in real-time, the system generates compact signature representations that can be quickly compared against known malicious patterns, maintaining high security reliability while significantly reducing processing time and computational overhead.
Solution Approach 2:
The system transforms fingerprint data by changing its parameters through cryptographic hashing and signature generation. This parameter transformation converts complex fingerprint information into standardized, easily comparable formats, enabling rapid detection of malicious web pages without requiring extensive processing of the original detailed fingerprint data.
3Measurement precision
If comprehensive fingerprint data is collected and analyzed, then accuracy in identifying malicious campaigns is improved, but data processing complexity increases
Solution Approach 1:
The patent extracts only the essential and distinguishing features from comprehensive fingerprint data to create signatures. By taking out and isolating the critical identifier elements rather than processing all fingerprint information, the system achieves high detection accuracy for malicious campaigns while reducing data processing complexity through selective feature extraction.
Solution Approach 2:
The system performs preliminary data organization and signature generation before analysis. By pre-processing fingerprint data into structured signatures and categorizing functions in advance, the system reduces the complexity of subsequent analysis while maintaining high detection accuracy, as the heavy lifting of data organization is completed beforehand.
Data Source
AI summary
A computer-implemented method for dynamically generating fingerprint signatures may include (i) detecting data associated with fingerprinting functions called in a target web page, (ii) associating, based on the data, fingerprints generated by the fingerprinting functions with a corresponding action, (ii) identifying, based on the data, callee information associated with each of the fingerprinting functions, and (iv) performing a security action that protects against malicious activity by calculating a cryptographic hash of a list including the fingerprinting functions and the corresponding actions to generate a fingerprint signature for the target web page. Various other methods, systems, and computer-readable media are also disclosed.