Function Modifying Code for Web Content Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge lies in preventing malicious active content from being executed within web-based services, particularly in electronic publishing and data access systems, which can lead to security risks such as virus infections and data breaches, especially when users have the freedom to author and publish content.
Innovation Solution
A method and system that include function modifying code within publication data to redirect and neutralize malicious function calls in programming languages supported by access applications, ensuring that only authorized functions are executed, thereby preventing obfuscation and malicious activities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If users are allowed to freely author and publish active content, then the richness and interactivity of Internet content is improved, but security vulnerabilities and malicious content execution risks increase
Solution Approach 1:
The patent introduces a trusted publication system as an intermediary between content authors and end users. This system publishes content with embedded function-modifying code that acts as a mediator to control and restrict the execution of potentially malicious functions while preserving legitimate content functionality. The intermediary validates and prepares content before delivery to users.
Solution Approach 2:
The system applies preliminary anti-action by pre-modifying functions in published content with security-restricting code before the content reaches users. The function-modifying code is embedded in advance to prevent malicious actions, such as blocking access to sensitive operations like document.cookie, rather than reacting to threats after they occur.
2Reliability
If function-modifying code is embedded in all published content to block malicious functions, then security against malicious content is improved, but the complexity of the publishing system increases
Solution Approach 1:
The patent implements a universal publication format that can accommodate both traditional content and function-modifying code within the same structure. The publication system handles multiple content types uniformly, and the function-modifying code serves multiple purposes including security restrictions, functionality preservation, and malicious action blocking, reducing the need for separate specialized systems.
Solution Approach 2:
The system changes the functional parameters of published content by embedding code that modifies function behavior. Instead of creating a completely new complex security infrastructure, the approach alters the execution parameters of existing functions to enforce security policies, simplifying the overall system architecture while maintaining reliability.
3Object-affected harmful factors
If malicious functions are blocked through function modification, then the protection of user data is improved, but the functionality of legitimate active content may be restricted
Solution Approach 1:
The function-modifying code applies selective restrictions to specific functions rather than blanket blocking all active content functionality. Legitimate functions retain their original behavior, while only potentially malicious functions (such as those accessing sensitive data) are restricted. This localized approach preserves content versatility while protecting user data.
Solution Approach 2:
The system converts the potential harm of function modification (which could restrict legitimate functionality) into a benefit by designing the modifying code to be intelligent and selective. The modified functions automatically preserve legitimate operations while blocking malicious ones, turning a potential drawback into an enhanced security feature that maintains content utility.
Data Source
AI summary
A network-based publication system, to publish data over a communications network, includes an interface to receive, via the communications network and from a first user, user data to be published by a network-based publication system. The publication system further includes a publisher component to generate publication data (e.g., an HTML document) including the user data and function modifying code. The publisher component generates the publication data in accordance with a publication format. The interface publishes the publication data via the communications network. The function modifying code is interpreted and executed, at a browser application, to disable (or modify) least one function of programming language supported by the browser application.