GUI Element Malware Mitigation via Selective Access Blocking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional malware mitigation systems in graphical user interface (GUI) environments often result in false positives, leading to user distrust and potential compromise of critical computing infrastructure, as they tend to block entire applications rather than specific malicious elements, causing inconvenience, economic loss, and potential human safety threats.
Innovation Solution
A method is implemented to monitor GUI elements, identify malicious actions, and block access to specific user interface elements while allowing the associated application to continue executing, using mechanisms like hooks, popup messages, and disabling human-computer interfaces, with a malware database generated through crowd-sourced reputations to determine the trustworthiness of elements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional malware mitigation systems block entire applications to prevent malicious actions, then malware prevention effectiveness is improved, but user convenience and application usability deteriorate due to false positives and unnecessary disruptions to legitimate applications
Solution Approach 1:
The patent segments the application into individual GUI elements (buttons, links, controls) and assigns separate safety assessments to each element. Instead of blocking the entire application, only the specific malicious GUI elements are blocked while legitimate elements remain accessible. This is achieved by monitoring event handlers at the GUI element level and applying blocks selectively to individual elements rather than the whole application process.
2Measurement precision
If malware detection systems flag malicious elements in legitimate applications, then security detection accuracy is improved, but user trust deteriorates due to perception of false positives
Solution Approach 1:
The patent applies different quality assessments to different parts of the application by evaluating each GUI element's event handlers independently. Legitimate GUI elements with safe event handlers are allowed to function normally, while only those with malicious event handlers are blocked. This localized approach ensures that security measures are applied precisely where needed without creating unnecessary alarms for safe application portions.
3Ease of operation
If selective blocking of specific GUI elements is implemented instead of entire applications, then user convenience is improved, but system complexity increases due to element-level monitoring and blocking mechanisms
Solution Approach 1:
The system monitors event handlers associated with GUI elements and automatically determines which elements to block based on their maliciousness. The anti-malware system self-manages the complexity of element-level monitoring by implementing automated detection and blocking logic that evaluates event handlers and applies appropriate blocks without requiring manual configuration or complex user intervention.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Mitigating malicious actions associated with graphical user interface elements may he performed by a computing device. A user interface element is monitored in a graphical user interface environment executing on the computing device. An association between the user interface element and a malicious action is determined. Access to the user interface element is blocked to prevent the malicious action.