Risk-Based Email Attachment Routing Through Remote Secure Browsers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cyber security measures are ineffective against malicious email attachments that deceive even the most vigilant users, as they rely on user vigilance and can compromise the client device due to local execution.
Innovation Solution
A system that evaluates attachment risk based on security policies and context, redirecting high-risk attachments to a remote secure browser for safe opening, thereby preventing local execution and potential device compromise.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If local execution of email attachments is permitted, then ease of operation is improved, but security reliability deteriorates due to potential device compromise from malicious code
Solution Approach 1:
The patent introduces a secure browser as an intermediary environment between the user and the attachment. The secure browser acts as a mediator that isolates the attachment execution from the client device, allowing users to open attachments safely without direct local execution. The secure browser session is temporary and self-destructing, ensuring that even if malicious code is present, it cannot compromise the underlying client device.
2Device complexity
If user vigilance is relied upon to identify malicious attachments, then device complexity is reduced, but security reliability deteriorates as users can be deceived by legitimate-looking emails
Solution Approach 1:
The system performs preliminary risk evaluation of attachments before they are opened by the user. The secure browser assesses the attachment's risk level in advance by analyzing properties such as file type, sender information, and context metadata. Based on this preliminary assessment, the system automatically determines whether to block or allow the attachment, removing the burden of vigilance from the user while maintaining high security reliability.
3Reliability
If all attachments are blocked for security, then security reliability is improved, but productivity deteriorates due to inability to access legitimate attachments
Solution Approach 1:
The patent applies different security treatments to different attachments based on their individual risk profiles. Rather than uniformly blocking all attachments, the system evaluates each attachment's properties (file type, sender domain, context) and applies appropriate security measures. Low-risk attachments are opened normally, medium-risk attachments are opened in the secure browser, and high-risk attachments are blocked. This differentiated approach maintains security reliability while preserving productivity by allowing legitimate attachments to be accessed without unnecessary restrictions.
Data Source
AI summary
A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory and configured to evaluate a risk associated with an email attachment based on application of security policies to properties of the attachment and to the context associated with receipt of the email. The at least one processor is further configured to detect an attempt by a user to open the email attachment. The at least one processor is further configured to prevent the opening of the attachment based on the evaluated risk. The at least one processor is further configured to redirect the attachment to a secure browser, hosted on a remote server, based on the evaluated risk.