Gateway JavaScript Injection for Dynamic Security Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for detecting malicious content in web pages are ineffective due to dynamic changes and can be overridden by hackers, as they require browser-specific add-ons or gateway injections that are vulnerable to disablement.
Innovation Solution
A system that inspects data packets from a web server for prohibited values and injects JavaScript code segments, including security analysis and modified functions, to prevent dynamic modifications or references to prohibited content, ensuring the security analysis functions are executed first and cannot be disabled by adversaries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If gateway JavaScript injection is used to detect malicious content, then security scanning capability is improved, but the injected JavaScript code can be overridden or disabled by hackers
Solution Approach 1:
The patent applies preliminary action by injecting security analysis JavaScript functions into the web page before any user interaction or malicious code execution. The security functions are embedded in the page lifecycle at the earliest possible moment, ensuring they are already in place to detect and prevent malicious content before it can execute harmful operations. This timing ensures the security scanning capability is established prior to any potential attacks.
Solution Approach 2:
The patent uses an intermediary approach by creating a dedicated security analysis JavaScript function that acts as a mediator between the gateway injection mechanism and the web page content. This intermediary function receives the web page data, performs security scanning, and controls whether the page is displayed or blocked. The intermediary layer isolates the security scanning logic from the main web page execution, preventing direct override while maintaining effective security monitoring.
2Reliability
If web browser add-ons are used for scanning web pages, then security detection is improved, but the add-ons require installation and periodic software upgrades
Solution Approach 1:
The patent employs a gateway as an intermediary component that performs security scanning centrally, eliminating the need for users to install and maintain browser add-ons. The gateway sits between the web server and the user's browser, handling all security detection tasks server-side. This intermediary approach transfers the security function from the user's device to a centralized system, removing installation and maintenance burdens while maintaining effective security detection.
Solution Approach 2:
The patent replaces the mechanical system of browser add-ons (which require installation, updates, and user management) with a network-based gateway system. Instead of installing software on user devices, the security scanning is performed through a gateway that processes web pages before they reach the user's browser. This substitution eliminates the need for local software installation and maintenance while achieving the same security detection objectives.
3Reliability
If JavaScript functions are modified to inspect for prohibited content, then security analysis is improved, but the JavaScript code complexity increases
Solution Approach 1:
The patent applies segmentation by dividing the security analysis function into distinct, modular components. The security analysis JavaScript function is separated from the main web page code, and the scanning logic is broken down into specific inspection steps (checking for prohibited values, detecting malicious patterns, validating page integrity). This segmentation makes the complex security analysis more manageable, maintainable, and easier to implement while preserving thorough security checking capabilities.
Data Source
AI summary
Computerized methods and systems inspect data packets received from a web server for the presence of a value from a list of prohibited values. If a prohibited value is absent, a gateway injects at least one JavaScript code segment for execution by a web browser. The at least one JavaScript code segment includes a plurality of JavaScript functions which include at least one security analysis JavaScript function and a plurality of modified JavaScript functions. Each of the modified JavaScript functions is created from a respective native JavaScript function to include at least one code segment that when executed inspects for at least one of: a dynamic modification of at least one JavaScript function from a prohibited list of JavaScript functions, a dynamic creation of at least one JavaScript function from the prohibited list of JavaScript functions, or a dynamic reference to a value from the list of prohibited values.