Host Pair Detection for Web Page Rendering Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Identifying malicious behavior, such as phishing and spoofing, in web page rendering is challenging due to hidden communications between systems, making it difficult to track actions and relationships between hosts.
Innovation Solution
A system that identifies and stores host pairs by analyzing web page rendering processes, including requests for resources, redirections, and script communications, to reveal malicious behavior by pairing hosts that are validly registered with those engaging in malicious activities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If web page rendering includes hidden communications between systems, then communication features are enhanced, but difficulty in identifying malicious behavior increases
Solution Approach 1:
The patent introduces a mediator system that intercepts and monitors communications between web pages and external systems. This intermediary captures requests, responses, and script communications that would otherwise be hidden, enabling detection of malicious behavior while preserving the enhanced communication features. The mediator acts as an observer that does not interfere with the actual communication but makes it visible for analysis.
2Adaptability or versatility
If new features are added to increase communication between systems, then system functionality is improved, but visibility of actions to users deteriorates
Solution Approach 1:
The patent implements a feedback mechanism that captures information about system communications and makes it visible to users or analysts. The system monitors communications between web pages and external systems, then provides feedback about these actions through logging, alerting, or display mechanisms. This ensures that while new communication features enhance system functionality, users remain informed about what actions are occurring.
3Adaptability or versatility
If web page rendering contacts multiple hosts, then web page functionality is enhanced, but complexity of tracking host relationships increases
Solution Approach 1:
The patent applies segmentation by breaking down the complex web of host relationships into discrete, manageable units. Each communication between a web page and an external host is captured as a separate event or record, with distinct identifiers for the web page, the external host, and the type of communication. This segmented approach allows the system to track multiple host relationships without becoming overwhelmed by complexity, as each relationship can be independently analyzed and stored.
Data Source
AI summary
The present disclosure relates to identifying and storing relationships between hosts that are used to present a web page to a user. In certain embodiments, a system for detecting host pairs is provided. The system may receive a first request to identify one or more host pairs associated with a first host. In response to receiving the first request, the system may send a second request to the first host for a document. The document may be a web page file that is used to build a web page associated with the first host. The web page file may include instructions that, when parsed, build the web page. In response to the second request, the first host may send a response to the system. The system may then use the data included in the response to build the web page. While building the web page, a pairing may be stored when a different host is contacted.